DevSecOps Engineer: Secure AWS Platform & CI/CD

Lepaya; Amsterdam; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Unlimited holidays

Lepaya Fridays

Hybrid working arrangement (office at

Flexible hours

Work from anywhere 8 weeks/year

Wellbeing partner

Internal career development

Lepaya Academy

Internal hiring program

Job summary

Lepaya, Amsterdam-based learning platform, is seeking a DevSecOps Engineer to join the security-forward DevOps team. You will help build and secure the cloud platform that powers Lepaya's global learning experiences.

You'll collaborate with security, IT, and product teams to automate guardrails, implement policy-as-code, and strengthen multi-account AWS security, while enabling fast, secure feature delivery.

Qualifications

• 4+ years in a DevOps/Platform/Security Engineering role in a fast-paced start-up or scale-up environment.
• Hands-on experience working with AWS and Terraform.
• Familiarity with CI/CD pipelines using GitHub Actions or similar tools.
• Experience working with Docker and cloud native orchestration services.
• A solid understanding of cloud security fundamentals such as IAM, hardening, encryption, network security, and secrets management
• Hands‑on experience with at least one area of security automation - vulnerability scanning, code security analysis (SAST/SCA), policy-as-code, or cloud security posture management - and the appetite to grow into the rest.

Responsibilities

• Build and secure AWS infrastructure with Terraform and least-privilege IAM.
• Embed security into CI/CD pipelines with scans and actionable results.
• Introduce policy-as-code to catch misconfigurations before merge.
• Develop secure-by-default infrastructure modules for easy, secure service launches.
• Strengthen cloud security posture across a multi-account AWS organization.
• Automate compliance and support security audits.
• Improve monitoring and observability with Grafana Cloud and OpenTelemetry.
• Find opportunities to automate repetitive processes and improve developer experience.

Skills

AWS

Terraform

CI/CD (GitHub Actions)

Docker

OpenTelemetry

Grafana

Security automation

Bash

Python

TypeScript

Tools

Terraform

AWS

GitHub Actions

Docker

OpenTelemetry

Grafana

Trivy/Grype/Snyk

GuardDuty

Job description

Lepaya, Amsterdam-based learning platform, is seeking a DevSecOps Engineer to join the security-forward DevOps team. You will help build and secure the cloud platform that powers Lepaya's global learning experiences.

You'll collaborate with security, IT, and product teams to automate guardrails, implement policy-as-code, and strengthen multi-account AWS security, while enabling fast, secure feature delivery.