DevSecOps engineer for fintech and iGaming

NDA; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Конкурентная зарплата

Ежегодный оплачиваемый отпуск и больня

Возможности роста и карьерного продвиж

Поддерживающая среда и развитие

Job summary

NDA ищет DevSecOps инженера для развития безопасной инженерной практики в нашей команде, работающей над финтех и iGaming продуктами.

Кандидат будет сотрудничать с DevOps, чтобы повысить безопасность и устойчивость сервисной архитектуры, внедрять policy-as-code, а также управлять безопасностью облачных инфраструктур и CI/CD процессов.

Qualifications

• Обязательное знание современных принципов DevOps и безопасной конвейеризации CI/CD.
• Опыт работы с Kubernetes/аналогами на продакшн‑уровне.
• Опыт с IaC и конфигурационным менеджментом (Terraform, Ansible, Chef).
• Опыт обеспечения безопасности распределённых систем и микросервисов.

Responsibilities

• Определение стратегий DevSecOps и долгосрочных приоритетов безопасности.
• Партнёрство с DevOps для повышения устойчивости Kubernetes/Service Mesh.
• Внедрение и поддержка policy-as-code и инфраструктурной валидации (OPA).
• Улучшение конвейеров provisioning и deployment через IaC и инструменты сканирования.

Skills

DevSecOps mindset

CI/CD security

Networking concepts

SSDLC familiarity

Security automation

Tools

Terraform

Ansible

Chef

AWS

Istio

Job description

Описание:

The company develops fintech and iGaming products.

Задачи:

Drive the evolution of the DevSecOps function by defining security initiatives and long‑term priorities, and promoting a security‑first engineering mindset Partner with the DevOps team to improve the security and resilience of Kubernetes (EKS), Istio, Service Mesh, and related cloud‑native infrastructure Support engineering teams during service transitions by embedding security best practices into operational processes and enabling knowledge sharing Develop and maintain policy‑as‑code frameworks and infrastructure validation mechanisms using OPA and other compliance automation tools Improve the security of infrastructure provisioning and deployment workflows across Terraform, Ansible, and other Infrastructure‑as‑Code solutions Integrate, maintain, and optimise security testing and scanning throughout the software development and release lifecycle Build automation for security monitoring, compliance checks, and operational controls to increase efficiency and reduce manual effort

Требования:

Strong practical understanding of modern DevOps principles and secure CI/CD pipeline design Hands‑on experience with Kubernetes or other enterprise‑grade container orchestration platforms Proven experience with Infrastructure‑as‑Code and configuration management technologies such as Terraform, Ansible, Chef, or equivalent tools Solid background administering production infrastructure, including web servers, databases, and supporting services Good understanding of networking concepts, including TCP/IP, routing principles, and the OSI model Experience securing distributed systems and microservices‑based architectures Proficiency with Git or other source code version control platforms Practical experience securing cloud environments, preferably AWS; experience with GCP or other major cloud providers is also valuable Ability to assess infrastructure security posture, identify vulnerabilities, and implement remediation measures Experience implementing identity and access management controls and security automation practices Hands‑on knowledge of secrets management platforms such as Vault and Privileged Access Management (PAM) solutions Experience integrating SAST, DAST, dependency scanning, container scanning, or similar security tools into CI/CD workflows Good understanding of Secure Software Development Lifecycle (SSDLC) principles and familiarity with security maturity frameworks such as OWASP SAMM v2 English at Upper‑intermediate level or higher

Условия:

Competitive salary based on experience Paid annual leave and sick leave Opportunities for professional and career growth Supportive environment focused on continuous development and long‑term growth