563_DevOps Engineer

CleverStaff LLC; Polska; Hybrid; PLN 466,000 - 700,000; Full time

Job summary

CleverStaff LLC is building an AI-powered HR platform and seeks its first dedicated DevOps engineer to own production infrastructure on Azure, manage access control, secrets, audit logs, and disaster recovery. You will work directly with our CEO and a product team that builds alongside the HR platform.

The role emphasizes security, compliance, and reliability, with Terraform-driven changes, Entra ID, Key Vault, and PostgreSQL in production.

Qualifications

• Hands-on experience running production workloads on Azure.
• Comfort writing Terraform and treating infrastructure as code.
• Knowledge of Entra ID, PIM, Conditional Access.
• Experience running PostgreSQL in production.
• Experience building CI/CD pipelines, ideally in Azure DevOps.
• Security and compliance mindset integrated into design.

Responsibilities

• Own production infrastructure and access control.
• Manage Secrets with Key Vault, expiry and rotation.
• Ensure audit logging with retention and alerts.
• Drive disaster recovery testing and documentation.
• Review database queries and write run scripts as needed.
• Collaborate with CEO and product teams to secure the platform.

Skills

Azure experience

Terraform

Access control

Audit logging

Disaster recovery

Security and compliance

Tools

Terraform

Azure DevOps

Entra ID

Key Vault

PostgreSQL

Job description

We're building an AI-powered HR platform for Nordic organisations. It covers recruitment, organisation, workforce, payroll, feedback and learning, all on one shared employee record. Our built-in AI drafts and suggests. A person approves.

HR data is about as personal as data gets. Our customers trust us with contracts, absence, pay, and reviews.

The role

This is our first dedicated DevOps role. The foundation is already in place: everything runs on Azure, the infrastructure is in Terraform, and deployments go through Azure DevOps. What we need now is one person who owns it, from access and secrets to audit logs and recovery. You'll work closely with our CEO, who sets the technical direction, and with a team that builds alongside the HR teams using the product.

What you'll own

• Production infrastructure and access.
• Access control. Separate admin accounts, regular access reviews, and Entra ID PIM and Conditional Access.
• Secrets management. Key Vault only, with expiry, rotation and federated credentials instead of long-lived keys.
• Database access. Review the queries and write scripts that run there.
• Audit logging. One-year retention, with alerts that someone actually reads.
• Disaster recovery. Not just a plan: tested, and tested again.

Our stack

• Area
• Tools
• Cloud
• IaC Terraform
• CI/CD
• Compute
• Data
• Network & edge VNet, Private endpoints, Azure Front Door with WAF
• Monitoring
• Identity Entra ID, Managed identities
• Other

You’ll fit in well if you

• Have solid, hands-on experience running production workloads on Azure
• Write and maintain Terraform comfortably, and treat infrastructure changes as code that needs review
• Know Entra ID well: managed identities, PIM, Conditional Access and workload identity federation
• Have run PostgreSQL in production
• Have built CI/CD pipelines, ideally in Azure DevOps
• Treat security and compliance as part of the design, not paperwork afterwards
• Prefer simple and dependable over clever, because a setup the team understands beats one only you understand