Cloud Engineer (DevSecOps)

Kingfisher; Kraków; Hybrid; PLN 167,000 - 290,000; Full time

Benefits offered by this job

Private medical insurance

Life insurance

Lunch break included

Training & Buddy program

Transport subsidy

Hybrid work model

LinkedIn Learning access

Job summary

Kingfisher plc in Kraków is seeking a Cloud Engineer (DevSecOps) to build, operate, and secure cloud solutions across AWS and GCP. You will automate infrastructure, improve CI/CD, and embed security across the delivery lifecycle.

You will work with cross-functional teams to deliver scalable platform capabilities with senior technical guidance. The role focuses on secure, reliable cloud platforms, collaboration with engineering, and contributing to platform standards and documentation.

Qualifications

• Hands-on experience with AWS or GCP cloud platforms.
• Proficiency with Terraform and IaC principles.
• Experience designing secure cloud infrastructure and CI/CD pipelines.
• Familiarity with security in the software delivery lifecycle.

Responsibilities

• Implement and improve secure cloud platform capabilities across AWS and GCP.
• Develop and maintain automation across infrastructure, CI/CD pipelines, and security controls.
• Design, implement, and maintain secure delivery pipelines and cloud infrastructure solutions.
• Collaborate with engineers to deliver platform improvements and security guardrails.
• Review and improve existing automation solutions; deploy and optimise platform tooling.
• Support platform operations through monitoring, incident resolution, and continuous improvement.

Skills

Cloud platform experience

Terraform / IaC

Networking fundamentals

IAM / RBAC

DevSecOps

GitLab CI

Python / Bash

Jira / Agile

English communication

Tools

Terraform

GitLab CI

Datadog

CloudWatch

Snyk

Trivy

Job description

Overview

Cloud Engineer (DevSecOps)

We’re Kingfisher, a team made up of over 74,000 passionate people who bring Kingfisher - and all our other brands: Castorama, B&Q, Screwfix, Brico Dépôt and Koçtaş - to life. That’s right, we’re big, but we have ambitions to become even bigger and even better. We want to become the leading home improvement company and grow the largest community of home improvers in the world. And that’s where you come in.

At Kingfisher, our customers come from all walks of life, and so do we. We want to ensure that all colleagues, future colleagues, and applicants to Kingfisher are treated equally regardless of age, gender, marital or civil partnership status, colour, ethnic or national origin, culture, religious belief, philosophical belief, political opinion, disability, gender identity, gender expression or sexual orientation.

We are open to flexible and agile working. Therefore, we offer colleagues a blend of working from home and our office, located in Kraków. Talk to us about how we can best support you!

At Kingfisher, we value the perspectives that any new team members bring, and we want to hear from you. We encourage you to apply for one of our roles, even if you do not feel you meet 100% of the requirements.

In return, we offer an inclusive environment, where what you can achieve is limited only by your imagination! We encourage new ideas, actively support experimentation, and strive to build an environment where everyone can be their best self.

We offer a competitive benefit package and plenty of opportunities to stretch and grow your career:

• 15,000 - 26,000 PLN gross per month on an employment contract
• Private medical healthcare at LUXMED (including dental care) for you and your family

• Medicover sports card (Fit & More package)

• Life insurance financed by the employer

• 30-minute lunch break included in the 8-hour working day

• Work in a highly professional and stimulating atmosphere

• Training & Buddy programme that will allow you to quickly adapt to your new role

• Wellbeing programme for employees

• Co-financing of monthly tickets for the public transport in Krakow

• Comfortable working environment in the office and the possibility of home office

• Language courses, accounting courses, access to LinkedIn Learning and the possibility of co-financing studies and certification

• Employee referral programme

What's the job?

About the role

We are looking for a Cloud Engineer (DevSecOps) to join our platform team and help build, operate, and improve secure, scalable, and reliable cloud solutions. In this role, you will apply your experience across AWS and GCP cloud platforms, automation, infrastructure, networking, and security to deliver dependable platform capabilities.

Working closely with cross-functional teams, you will deliver cloud platform initiatives, improve automation, and embed security throughout the software delivery lifecycle. You will take ownership of assigned solutions and contribute to building infrastructure and DevSecOps capabilities, with support from senior engineers and technical leads on broader platform improvements.

Ifyou'reseeking an exciting opportunity to step out of your comfort zone and make a real impact building better cloud platform, this is the job for you!

Responsibilities

• Implement and improve secure cloud platform capabilities, supporting trusted paths to production and security best practices across the delivery lifecycle.

• Develop and maintain automation across infrastructure, CI/CD pipelines, and security controls, reducing manual effort and improving platform reliability.

• Design, implement, and maintain secure delivery pipelines and cloud infrastructure solutions.

• Work closely with the Tech Lead, Principal Engineer, and engineering teams to deliver and evolve the platform in line with the infrastructure strategy.

• Review existing automation solutions, identify opportunities for improvement, and implement agreed changes.

• Deploy, maintain, troubleshoot, and optimise IaaS, PaaS, and platform tooling capabilities across AWS and GCP.

• Contribute to platform standards, engineering guidelines, best practices, and technical documentation.

• Collaborate with engineering, security, and business stakeholders to gather requirements and deliver cloud solutions that meet authentication, authorisation, networking, security, and operational standards.

• Support platform operations through monitoring, incident troubleshooting, problem resolution, and continuous improvement activities.

What you'll bring

• Hands-on experience with AWS or GCP (strong practical expertise in at least one platform).

• Proficiency with Terraform and Infrastructure as Code (IaC) principles for modular, scalable, and secure cloud provisioning.

• Solid understanding of cloud networking fundamentals: VPC/VNet architecture, routing, firewall rules, private endpoints, and hybrid/VPN connectivity.

• Practical experience implementing cloud IAM: role-based access control (RBAC), service accounts, least-privilege principle, and workload / workforce identity federation.

• Working knowledge of DevSecOps practices and integrating security guardrails into the software delivery lifecycle.

• Proven experience building and maintaining Continuous Integration & Delivery pipelines using CI/CD platforms (preferably GitLab CI).

• Hands-on scripting proficiency with Python and Bash.

• Experience working in Agile/Scrum delivery environments using work tracking tools like Jira.

• Strong troubleshooting and analytical mindset with a focus on reliability and developer enablement.

• Excellent written and verbal communication skills in English.

Nice to have

• Multi-cloud experience across both AWS and GCP.

• Experience with enterprise firewall / security appliances (e.g., Google Cloud NGFW or Palo Alto VM-Series).

• Familiarity with observability and logging suites (e.g., Datadog, CloudWatch, or Google Cloud Operations).

• Exposure to container/infrastructure vulnerability scanning tools (e.g., Trivy, Snyk, GitLab integrated scanners).

• Understanding of cloud cost optimisation (FinOps) practices.

To get to know us better visit:

LinkedIn

Kingfisher plc