Senior DevSecOps Engineer

Commit; Województwo mazowieckie; On-site; PLN 260,000 - 380,000; Full time

Job summary

Commit is seeking a Senior DevSecOps Engineer to own our AWS infrastructure and Kubernetes platform, embedding security at every delivery stage and ensuring reliability as we scale.

You will harden cloud and cluster security, implement IaC with Terraform, build secure CI/CD pipelines, and lead incident response and vulnerability management.

Based in Poland, you will collaborate with Python, data and AI teams, maintaining cost efficiency and robust security across production workloads.

Qualifications

• 5+ years in DevOps / SRE / platform engineering.
• 3+ years running AWS and Kubernetes in production.
• Cloud security experience (IAM, KMS, network security).
• Kubernetes security (RBAC, policies, pod security).
• Terraform / IaC.
• SAST and container scanning.
• Observability and incident response (Prometheus, Grafana, ELK).
• Docker and containerization.
• Python and Bash scripting.
• Based in Poland; fluent English.

Responsibilities

• Design, secure and operate AWS infrastructure (EKS/ECS, Lambda, S3, RDS, VPC, IAM).
• Own cloud security: least-privilege IAM, encryption at rest and in transit, secrets management.
• Harden production Kubernetes: RBAC, network policies, pod security standards.
• Manage infrastructure as code with Terraform, including policy-as-code.
• Build CI/CD pipelines with integrated security: SAST, scanning and signing.
• Own monitoring, logging and alerting; lead incident response and post-mortems.
• Run vulnerability management and patching; remediate audit findings.
• Support data and AI workloads securely; keep cloud costs in check.

Skills

DevOps / SRE experience

Cloud security

Kubernetes in production

Terraform / IaC

CI/CD security tooling

Python / Bash scripting

Linux fundamentals

English proficiency

Tools

Terraform

Prometheus

Grafana

ELK/CloudWatch

GuardDuty

Security Hub

ArgoCD

Kubernetes

Job description

We're looking for a Senior DevSecOps Engineer to own the company AWS infrastructure and Kubernetes platform with security built in. You'll harden our cloud and clusters, embed security into every stage of delivery, and keep the platform reliable as it scales, working closely with our Python backend, data and AI teams.

Key Responsibilities:

• Design, secure and operate AWS infrastructure (EKS/ECS, Lambda, S3, RDS, VPC, IAM).
• Own cloud security: least-privilege IAM, encryption at rest and in transit (KMS), secrets management, network segmentation, and threat detection (GuardDuty, Security Hub, CloudTrail).
• Harden production Kubernetes: RBAC, network policies, pod security standards, admission control and runtime security.
• Manage all infrastructure as code with Terraform, including policy-as-code and security guardrails.
• Build CI/CD pipelines with integrated security: SAST, dependency scanning, container image scanning and signing, secret detection.
• Own monitoring, logging and alerting; lead incident response, including security incidents and post-mortems.
• Run vulnerability management and patching, and remediate audit findings.
• Support data and AI/LLM workloads securely and keep cloud costs in check.

Requirements (must-have):

• 5+ years in DevOps / SRE / platform engineering, with 3+ years running AWS and Kubernetes in production.
• Hands-on production experience in cloud and infrastructure security (IAM, KMS/secrets, network security, GuardDuty / Security Hub).
• Kubernetes in production, including Kubernetes security (RBAC, network policies, pod security).
• AWS: EKS, ECS, Lambda, S3, RDS, VPC.
• Terraform / infrastructure as code.
• Secure CI/CD and DevSecOps tooling (SAST, image and dependency scanning).
• Observability and incident response (Prometheus, Grafana, ELK / CloudWatch).
• Docker / containerization.
• Scripting in Python and Bash.
• Strong Linux and networking fundamentals.
• Based in Poland; fluent English.

Nice to Have:

• Certifications: AWS Security Specialty, CKS, CISSP.
• SOC 2 / ISO 27001 compliance experience.
• SIEM tooling; threat modeling.
• ArgoCD / GitOps.
• Infrastructure for ML/LLM workloads.
• FinOps / cloud cost optimization.