DevSecOps Engineer

Astek; Santo Niño 1st; On-site; PHP 1,800,000 - 2,400,000; Full time

Job summary

Astek is seeking a senior DevSecOps/SRE with a security-focused mindset to manage cloud and infrastructure operations. The role requires hands-on experience with AWS CloudHSM, Terraform/Terragrunt, and enterprise-grade artifact governance using JFrog Artifactory.

You will work with Kubernetes/EKS, Helm, and service meshes to implement Zero Trust and robust CI/CD pipelines. The ideal candidate will demonstrate deep AWS networking, Linux scripting, and proficiency across at least one major

Qualifications

• 7+ years in DevSecOps, Platform Engineering, or SRE with security focus.
• Hands-on production experience with AWS CloudHSM.
• Advanced Terraform + Terragrunt for DRY module composition and multi-environment governance.
• Artifactory governance, signed builds, CI/CD integration.
• Strong AWS expertise (VPC, IAM, KMS, EKS, Route 53, security services).
• Production Kubernetes / EKS, Helm, CRDs.
• Zero Trust principles; service mesh (Istio / Envoy / Linkerd / App Mesh).
• Strong Linux administration and shell scripting.
• Experience with programming languages: JavaScript, Java, Python, or .NET.
• Deep cloud networking - DNS, firewalls, routing.
• GitOps + CI/CD pipeline expertise.

Skills

DevSecOps

Platform Engineering

SRE

Security

Cloud Networking

Tools

Terraform

Terragrunt

AWS CloudHSM

JFrog Artifactory

Kubernetes

EKS

Istio/Envoy/Linkerd/App Mesh

Helm

GitOps

CI/CD

Job description

• Overall 7+ years in DevSecOps, Platform Engineering, or SRE with a security focus.
• Hands-on production experience with AWS CloudHSM.
• Advanced Terraform + Terragrunt- DRY module composition, remote-state governance, multi-environment.
• JFrog Artifactory- enterprise artifact governance, signed builds, CI/CD integration.
• Strong AWS expertise (VPC, IAM, KMS, EKS, Route 53, security services).
• Production Kubernetes / EKS, Helm, CRDs.
• Zero Trust principles; service mesh (Istio / Envoy / Linkerd / App Mesh).
• Strong Linux administration skills and Shell scripting expertise.
• Experience with software engineering in at least one of these programming languages: JavaScript, Java, Python, or .NET.
• Deep cloud networking - DNS, firewalls, routing.
• GitOps + CI/CD pipeline expertise.