We are looking for a Senior DevOps/DevSecOps Specialist who not only brings deep expertise in infrastructure automation, reliability, and CI/CD, but also possesses strong hands-on experience in Cybersecurity. In this role, you will bridge the gap between DevOps and Security—implementing robust security controls across our cloud architecture, automating threat detection, securing software delivery pipelines, and ensuring our infrastructure is resilient against cyber threats.
What will you do:
DevOps & Infrastructure Engineering
Tune and configure servers, clusters, and containers appropriately to ensure high availability, performance, and scalability.
Build tools and automation to reduce occurrences of errors, optimize system reliability, and improve customer experience.
Perform root cause analysis (RCA) for production errors, investigate incidents, and resolve complex technical issues.
Design, implement, and maintain procedures for system troubleshooting, monitoring, and automated visualization.
Maintain comprehensive technical documentation for system architecture, operational procedures, and emergency response plans.
Cybersecurity & Infrastructure Hardening
DevSecOps Integration: Embed security tools, static/dynamic code analysis (SAST/DAST), and automated vulnerability scanning directly into CI/CD pipelines.
Security Testing & Code Reviews: Perform ongoing security testing, penetration testing, and code reviews to identify and improve software security posturing.
System & Cloud Hardening: Implement, test, and operate advanced security techniques, access controls, network segmentation, and encryption strategies in compliance with a technical reference architecture.
Incident Response & Threat Mitigation: Provide engineering designs for new software solutions to help mitigate security vulnerabilities and act as a key responder to security incidents.
Governance & Advisory: Consult team members on secure coding practices, zero-trust architecture, and stay updated with the latest tools, security frameworks, and threat vectors.
What are we looking for:
Education & Experience: Bachelor's Degree in Computer Science, Computer Engineering, Cybersecurity, or a relevant field. Proven experience as a Senior DevOps, Infrastructure Engineer, DevSecOps Engineer, or Security Engineer.
Security & Cryptography Expertise: Detailed technical knowledge of standards, frameworks, and capabilities for authentication and authorization (OAuth, SAML, IAM), applied cryptography, threat modeling, security vulnerabilities, and remediation (OWASP Top 10).
Scripting & Development: Strong proficiency in Ruby, Python, Go, or .NET, alongside advanced Bash scripting for automation and security orchestration.
Database & Systems: Working knowledge of databases and SQL, especially production-level tuning, access security, and data encryption at rest/in transit.
Containerization & CI/CD: Hands-on mastery of Docker, Kubernetes, CI/CD pipelines (e.g., GitLab CI, GitHub Actions, Jenkins), Infrastructure as Code (Terraform/Ansible), and cloud-native security tools.
Network & Web Protocols: Adequate knowledge of web-related technologies (Web Applications, Web Services, SOA), network/web protocols (TLS/SSL, WAF, VPNs), and Load Balancing / Async Queue setups.
Security & Observability Tools: Proficiency in monitoring/APM tools (e.g., Datadog, Prometheus, Grafana, ELK) combined with SIEM, vulnerability scanners (e.g., SonarQube, Trivy, Snyk), and log auditing tools.
Mindset: Strong passion for security research, continuous learning, and driving a proactive security culture across engineering teams.
Skills Required
- Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or related field
- Proven experience as a Senior DevOps, Infrastructure Engineer, DevSecOps Engineer, or Security Engineer
- Hands-on proficiency in Ruby, Python, Go, or .NET
- Advanced Bash scripting for automation and security orchestration
- Experience with Docker and Kubernetes containerization
- Experience building and securing CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins)
- Infrastructure as Code experience (Terraform, Ansible)
- Knowledge of databases and SQL including production tuning and data encryption
- Practical knowledge of OAuth, SAML, IAM, applied cryptography, and authentication/authorization standards
- Experience embedding SAST/DAST and automated vulnerability scanners into pipelines (SonarQube, Trivy, Snyk)
- Familiarity with network/web security (TLS/SSL, WAF, VPNs), load balancing, and network segmentation
- Experience with monitoring/APM and observability tools (Datadog, Prometheus, Grafana, ELK) and SIEM/log auditing
- Experience with security testing, penetration testing, threat modeling, and OWASP Top 10 remediation
- Incident response and threat mitigation engineering experience
- Ability to produce and maintain system documentation, run RCA for incidents, and consult on secure coding and zero-trust
What We Do
Through our payment solution, we help businesses not to worry about late payments and help them significantly increase their cash flow.
