DevSecOps Engineer — Secure AWS Cloud, Hybrid (Amsterdam)

Krauthammer International; Amsterdam; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Unlimited holidays

Hybrid working

Job summary

Lepaya is seeking a DevSecOps Engineer to secure and scale our cloud platform, collaborating with the DevOps, Security, IT, and product teams. You’ll implement guardrails, automate security in CI/CD, and build secure-by-default infrastructure in AWS.

With 4+ years in DevOps, Platform, Cloud, or Security roles, you’ll bring hands-on AWS/Terraform, GitHub Actions, Docker, and security automation expertise, plus strong English communication and a pragmatic, security-first mindset.

Qualifications

• Minimum 4 years of experience in a DevOps, Platform, Cloud, or Security Engineering role in a fast-paced start-up or scale-up environment.
• Hands-on experience working with AWS and Terraform.
• Familiarity with CI/CD pipelines using GitHub Actions or similar tools.
• Experience working with Docker and cloud native orchestration services.
• A solid understanding of cloud security fundamentals such as IAM, hardening, encryption, network security, and secrets management
• Hands-on experience with at least one area of security automation - vulnerability scanning, code security analysis (SAST/SCA), policy-as-code, or cloud security posture management - and the appetite to grow into the rest.
• Scripting skills in Bash or Python. Experience with TypeScript is a plus.
• Strong English communication skills.

Responsibilities

• Building and improving our AWS infrastructure using Terraform, with security designed in from the start: least-privilege IAM, encryption, and network controls as defaults, not afterthoughts.
• Embedding security into our CI/CD pipeline: dependency, container, and secrets scanning in every pipeline, and making the results actionable for engineers instead of noisy.
• Introducing policy-as-code (e.g. Checkov, OPA) so infrastructure misconfigurations are caught before they're merged, not after they're deployed.
• Developing secure-by-default infrastructure modules that enable engineering teams to launch new, secure services with ease.
• Strengthening our cloud security posture across a multi-account AWS organization: identity management, threat detection, and vulnerability management as an ongoing program.
• Automating compliance: working with our Security Engineer and IT Manager to turn security controls into automatically collected, audit-ready evidence, and supporting security audits.
• Improving monitoring and observability using Grafana Cloud and OpenTelemetry, including security signals and alerting.
• Finding opportunities to automate repetitive processes and continuously improve the developer experience.

Skills

AWS

Terraform

CI/CD

Docker

Security automation

Bash or Python

English communication

Tools

GitHub Actions

Checkov

OPA

Trivy

Snyk

Job description

Lepaya is seeking a DevSecOps Engineer to secure and scale our cloud platform, collaborating with the DevOps, Security, IT, and product teams. You’ll implement guardrails, automate security in CI/CD, and build secure-by-default infrastructure in AWS.

With 4+ years in DevOps, Platform, Cloud, or Security roles, you’ll bring hands-on AWS/Terraform, GitHub Actions, Docker, and security automation expertise, plus strong English communication and a pragmatic, security-first mindset.