Senior DevSecOps & Systems Engineer (Kubernetes)

Softswiss; Poznań; Presencial; PLN 180.000 - 360.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Private health insurance

Sports benefits

Comprehensive Mental Health Program

Free English lessons (online)

Local language courses

Paid time off

Maternity leave support

Referral program rewards

Upskilling, internal workshops, and...

Descripción de la vacante

Softswiss is seeking an experienced Infrastructure Security Engineer to embed security across the technology stack, including CI/CD, Kubernetes, and cloud environments. You will integrate security checks into CI/CD pipelines, manage secrets with Vault, and enforce access controls.

You will harden systems against CIS benchmarks, monitor vulnerabilities, support incident response, and collaborate with development and operations teams. English required at least B1 and Russian beneficial.

Formación

• 3+ years of experience as a System Engineer, SRE, or DevOps Engineer.
• Solid Linux administration and troubleshooting skills.
• Experience with configuration management tools such as Ansible, SaltStack, Terraform, or Pulumi.
• Experience with Kubernetes and Helm.
• Experience configuring GitLab CI/CD pipelines.
• Experience with Anti-DDoS solutions, WAF, and WAAP (Cloudflare, Fastly, Akamai, etc.).
• Experience with monitoring tools (Prometheus stack, Zabbix).
• Strong understanding of information security fundamentals, including least privilege, defense in depth, network security, and TLS/PKI
• Experience with secrets management solutions such as HashiCorp Vault or similar
• English level B1+ and strong command of Russian
• Higher technical education

Responsabilidades

• Integrate security checks into CI/CD pipelines, including dependency, container image, IaC, and secret scanning
• Harden servers, Kubernetes clusters, and cloud environments in accordance with CIS benchmarks
• Manage secrets, certificates, and the PKI lifecycle using Vault
• Manage access control (SSO, IAM, least privilege) and conduct regular access reviews
• Track and remediate vulnerabilities, coordinating patching activities across development and infrastructure teams
• Support security incident investigations, incident response, audits, and compliance activities
• Enforce Kubernetes runtime and policy security, including RBAC, network policies, Pod Security Standards (PSS), and Kyverno/OPA
• Set up and maintain production and staging infrastructure, including updates and incident resolution
• Improve infrastructure setup and maintenance processes
• Support and develop GitLab CI pipelines
• Contribute to the design of complex IT systems
• Collaborate with product development teams and stakeholders
• Handle monitoring events, including periodic day and night on-call duties

Conocimientos

Strong problem-solving skills

Information security fundamentals

English proficiency

Russian language proficiency

Educación

Higher technical education

Herramientas

Ansible

SaltStack

Terraform

Pulumi

Kubernetes

Helm

GitLab CI/CD

HashiCorp Vault

WAF/WAAP (Cloudflare, Fastly, Akamai)

Prometheus stack

Zabbix

Descripción del empleo

Softswiss is seeking an experienced Infrastructure Security Engineer to embed security across the technology stack, including CI/CD, Kubernetes, and cloud environments. You will integrate security checks into CI/CD pipelines, manage secrets with Vault, and enforce access controls.

You will harden systems against CIS benchmarks, monitor vulnerabilities, support incident response, and collaborate with development and operations teams. English required at least B1 and Russian beneficial.