Sr. DevSecOps Engineer (Remote)

Ennismore; Polska; Remoto; PLN 240.000 - 360.000; Tempo pieno

Descrizione del lavoro

Ennismore is hiring a Senior DevSecOps Engineer to strengthen security across our AWS, Kubernetes (EKS), and CI/CD environments. You will embed security deeply into cloud platforms and delivery workflows, collaborating with DevOps, QA, and engineering teams in a remote setting.

You will drive secure-by-design patterns, posture monitoring, and automated compliance, ensuring scalability, resilience, and enterprise-grade security as the organisation grows.

Competenze

• 5+ years in DevSecOps, Cloud Security Engineering, or Platform Security roles.
• Hands-on experience securing AWS environments including IAM, networking, encryption, and cloud services at scale.
• Deep expertise with Kubernetes (EKS), container hardening, cluster security, and workload isolation.

Mansioni

• Lead security for AWS, EKS, and microservices, defining secure-by-design patterns.
• Integrate security controls into GitHub Actions and ArgoCD pipelines.
• Implement SAST, DAST, IaC scanning, and container security checks.
• Embed policy-as-code, automated approvals, and compliance in delivery workflows.
• Expand monitoring and threat detection with tools like Wiz, Datadog, and security signals.
• Drive incident response playbooks, forensics capability, and security automation.

Conoscenze

DevSecOps

Cloud security

Kubernetes security

IAM & networking

Threat modelling

Strumenti

Terraform

OPA

Checkov

Security scanning

Descrizione del lavoro

Location: Remote hired through remote.com

Employment Type: Permanent

Reports to: Head of DevOps Engineering

About us:

We are a fast-growing, global hospitality and lifestyle group, supporting a diverse portfolio of brands, properties, and digital experiences across multiple regions. With a strong focus on innovation, scalability, and guest-facing technology, the platform continues to evolve rapidly, requiring modern cloud-native architectures, high availability, and a strong security foundation to support ongoing growth and transformation.

About the Role

We are expanding rapidly and continuing to evolve a global technology ecosystem as new digital platforms, brands, and customer experiences are brought onto our cloud environment. To support this growth—and to strengthen our security posture,we are hiring a Senior DevSecOps Engineer through remote.com to embed security deeply into our cloud, platform, and delivery workflows. This is a newly created role and will be pivotal in maturing security capabilities across AWS, Kubernetes (EKS), CI/CD pipelines, and infrastructure as code. You will work closely with DevOps, QA, and application engineering teams in a highly collaborative environment. This is a hands-on technical leadership position, where you will drive security automation, implement secure-by-default practices, and help ensure the platform remains resilient, scalable, and compliant as the organisation continues to grow.

What You’ll Do:

Platform Security & ArchitectureAs a newly created position, this role will provide security leadership and oversight for our environment, working alongside the parent company’s security team to align standards and practices.Lead the implementation of secure-by-design patterns across AWS, EKS, and microservices. Define and evolve cloud security baselines, identity policies, network segmentation, and access controls.

• Drive workload hardening for Kubernetes clusters, containers, and supporting infrastructure.
• CI/CD & SDLC SecurityIntegrate security controls directly into GitHub Actions and ArgoCD pipelines.
• Implement SAST, DAST, IaC scanning, dependency scanning, and container security checks.
• Embed policy-as-code, automated approvals, and compliance automation into delivery workflows.
• Cloud, Kubernetes & Infrastructure SecurityLeverage Wiz to monitor posture, vulnerabilities, misconfigurations, and cloud risk.
• Implement secure configuration patterns for EKS, including RBAC, network policies, service mesh considerations, and runtime protection.
• Lead the governance, validation, and security hardening of our Terraform infrastructure.
• Observability, Threat Detection & Incident ResponseExpand monitoring, logging, and alerting using Datadog, including security signals, anomaly detection, and audit monitoring.
• Establish and improve incident response processes, playbooks, and forensics capability.
• Partner with platform teams to ensure security events are actionable, measurable, and tuned.
• Security Automation & ToolingBuild automated guardrails to remove manual effort and reduce operational risk.
• Integrate Wiz insights into workflows, reporting, and continuous improvement.
• Drive adoption of new security tooling, standards, and architectural best practices.
• Collaboration & CultureWork closely with DevOps, Product, Engineering, and security stakeholders to ensure consistency and alignment.
• Influence engineering teams to adopt secure patterns without slowing delivery.
• Champion a mature DevSecOps culture across the organisation through education, documentation, and knowledge sharing.

What We’re Looking For:

Essential Experience5+ years in DevSecOps, Cloud Security Engineering, or Platform Security roles. Strong hands-on experience securing AWS environments including IAM, networking, encryption, and cloud services at scale. Deep expertise with Kubernetes (EKS), container hardening, cluster security, and workload isolation.

• Proven experience embedding security into GitHub Actions and ArgoCD pipelines.
• Excellent proficiency with IaC security—Terraform, OPA, Checkov, security scanning.
• Experience supporting ISO27001 / SOC2 / PCI initiatives.
• Strong background in vulnerability management, threat modelling, and cloud posture monitoring (Wiz or similar).
• Strong understanding of distributed systems, microservices, and cloud-native security patterns.

Why This Role Matters:

We are scaling fast as we onboard new hotels, expand our membership ecosystem, and build modern digital experiences. This role is critical to ensuring that the platform remains secure, resilient, and enterprise-ready—without slowing down engineering teams.You will be instrumental in driving maturity, reducing risk, and shaping the future of our DevSecOps practices across the entire organisation.