DevSecOps Engineer

Formelio; Den Haag; On-site; EUR 61,000 - 73,000; Full time

Benefits offered by this job

A competitive salary up to 6,000 €/mo

NS Business Card with commuting costs

200 hours of holiday leave (1.0 FTE)

Company laptop

Pension plan with 10% salary monthl

€400 training budget annually

Job summary

Formelio is seeking a DevSecOps engineer to help keep the platform secure, compliant and highly available. You’ll own the technical side of compliance and work with the compliance lead to translate requirements into functioning systems.

You’ll operate Kubernetes clusters, implement governance controls, and collaborate with application teams on security and reliability. English proficiency is required.

Qualifications

• 3+ years in operations, DevSecOps or SRE roles.
• Hands-on with Kubernetes, Linux, IaC and GitOps.
• Security-conscious with health data assets.
• Good English communication skills.

Responsibilities

• Security: keep apps, deps, clusters and hosts secure; implement controls per NEN 7510, ISO 27001, MedMij, DigiD, TSS-SFW; assist audits.
• DevOps: build, run and improve platform using IaC, ArgoCD, Kargo and Terraform; monitor components; verify backups and time sync; manage certs.
• Operations: keep systems up to date and available; respond to security questions in DPIAs and customer questionnaires; support external pen-tests.

Skills

Kubernetes

Linux

Infrastructure as Code

GitOps

English communication

Tools

ArgoCD

Kargo

Terraform

GitHub

Vault

SOPS

Job description

Keep our platform running, secure and compliant.

You’ll build and maintain our infrastructure along with the security controls that protect it. As part of our four-person DevSecOps team, you’ll own the technical side of compliance, working closely with our compliance lead to turn requirements into working systems.

Our Stack

• We run and manage our own Kubernetes clusters on OVHCloud with GitOps: ArgoCD, Kargo.
• We use PostgreSQL, MariaDB and MongoDB databases.
• General tools used: GitHub, Google Workspace, Slack, Notion.
• Our services focus on health data presentation and secure exchange. Written in Java, Typescript, Rust, Go.
• Infrastructure as code: Kubernetes clusters, DNS, GitHub settings, VPN (NetBird), identity and access management, Grafana Cloud,.
• Networking and access: Envoy Gateway, Kyverno, Dex, and Hoop.
• Observability: OpenTelemetry, ClickStack, Grafana, and Vector.
• Host Security: CrowdStrike Falcon XDR.
• Secret Management: Vault, ESO, CertManager, SOPS.

What you will do

Security

• Together with the application teams, ensure applications, their dependencies, cluster components, and host machines are up-to-date and secure.
• Responsible for implementing and maintaining technical and procedural controls required by our various security frameworks (i.e. NEN 7510, ISO 27001, MedMij, DigiD, TSS-SFW) in close cooperation with our compliance lead.
• Oversee yearly external pen-tests. Make sure the issues found are resolved in a timely manner.
• Answer technical questions in DPIAs and customer security questionnaires, and join audits when necessary.

DevOps

• Build, run, and improve our platform, utilising infrastructure as code, ArgoCD, Kargo, and Terraform.
• Set up and maintain monitoring for platform components.
• Test core platform functionalities such as backups and time synchronisation.
• Manage our networking configuration and certificates.
• Keep systems up to date and available.

What you bring

• 3+ years of experience in an operations, Dev(sec)Ops. or SRE role.
• Hands-on experience with Kubernetes, Linux, Infrastructure as Code, and GitOps.
• You take security seriously and know what is at stake with health data.
• Good communication skills in English.

It’s an advantage if you have:

• Proficiency in Dutch.
• Experience with ISO 27001, NEN 7510 or a similar security framework.
• Experience in healthcare or another regulated sector.
• Experience with security tooling, such as EDR, SIEM, WAF or vulnerability scanning.
• Experience with GitOps (for example, Argo CD), Orchestration (for example, Kargo).
• You like to organise: plan team sessions, keep the security backlog up to date, and track progress.
• Relevant certifications (for example, cloud, Kubernetes or security certifications).

What’s in it for you?

• A competitive salary, based on education and previous experience, up to €6,000 a month.
• NS Business Card with commuting costs up to €300 being paid.
• 200 hours of holiday leave (1.0 FTE) and 8% holiday allowance.
• A company laptop
• Pension plan with 10% of your salary contributed every month (7% contribution from the company).
• Developmental options related to your career growth, such as internal training and the ability to take external training if desired (400€ budget annually).