We're looking for a Senior DevSecOps Engineer to own the company AWS infrastructure and Kubernetes platform with security built in. You'll harden our cloud and clusters, embed security into every stage of delivery, and keep the platform reliable as it scales, working closely with our Python backend, data and AI teams.
Key Responsibilities:
- Design, secure and operate AWS infrastructure (EKS/ECS, Lambda, S3, RDS, VPC, IAM).
- Own cloud security: least-privilege IAM, encryption at rest and in transit (KMS), secrets management, network segmentation, and threat detection (GuardDuty, Security Hub, CloudTrail).
- Harden production Kubernetes: RBAC, network policies, pod security standards, admission control and runtime security.
- Manage all infrastructure as code with Terraform, including policy-as-code and security guardrails.
- Build CI/CD pipelines with integrated security: SAST, dependency scanning, container image scanning and signing, secret detection.
- Own monitoring, logging and alerting; lead incident response, including security incidents and post-mortems.
- Run vulnerability management and patching, and remediate audit findings.
- Support data and AI/LLM workloads securely and keep cloud costs in check.
Requirements (must-have):
- 5+ years in DevOps / SRE / platform engineering, with 3+ years running AWS and Kubernetes in production.
- Hands-on production experience in cloud and infrastructure security (IAM, KMS/secrets, network security, GuardDuty / Security Hub).
- Kubernetes in production, including Kubernetes security (RBAC, network policies, pod security).
- AWS: EKS, ECS, Lambda, S3, RDS, VPC.
- Terraform / infrastructure as code.
- Secure CI/CD and DevSecOps tooling (SAST, image and dependency scanning).
- Observability and incident response (Prometheus, Grafana, ELK / CloudWatch).
- Docker / containerization.
- Scripting in Python and Bash.
- Strong Linux and networking fundamentals.
- Based in Poland; fluent English.
Nice to Have:
- Certifications: AWS Security Specialty, CKS, CISSP.
- SOC 2 / ISO 27001 compliance experience.
- SIEM tooling; threat modeling.
- ArgoCD / GitOps.
- Infrastructure for ML/LLM workloads.
- FinOps / cloud cost optimization.
Skills Required
- 5+ years of experience in DevOps, SRE, or platform engineering
- 3+ years running AWS and Kubernetes in production
- Production experience in cloud and infrastructure security, including IAM, KMS, secrets management, network security, GuardDuty, and Security Hub
- Production Kubernetes experience, including RBAC, network policies, and pod security
- Experience with AWS EKS, ECS, Lambda, S3, RDS, and VPC
- Experience with Terraform and infrastructure as code
- Experience with secure CI/CD and DevSecOps tooling, including SAST, image scanning, and dependency scanning
- Experience with observability and incident response using Prometheus, Grafana, ELK, or CloudWatch
- Docker and containerization experience
- Python and Bash scripting experience
- Strong Linux and networking fundamentals
- Based in Poland
- Fluent English
- AWS Security Specialty, CKS, or CISSP certification
- SOC 2 or ISO 27001 compliance experience
- SIEM tooling and threat modeling experience
- ArgoCD or GitOps experience
- Infrastructure experience for ML or LLM workloads
- FinOps or cloud cost optimization experience
Similar Jobs
What We Do
Commit is a global tech services company with offices in Israel, US, Canada, UK, and Europe. The company was founded in 2005 and has over 700 multi-disciplinary innovation experts who serve a broad range of companies, from small startups to large enterprises in multiple business sectors. Commit specializes in advanced technologies and applications with dedicated practices in Cloud, GenAI, Software, IoT, Big Data, Cyber, Collaboration, Data center migration projects, and more. Commit offers innovative, end-to-end technology solutions by developing custom software and IoT platforms for clients looking to build their next-gen products within the modern ICT world. Commit’s complete and comprehensive engineering powerhouse of resources, and proprietary Flexible R&D methodology helps transform its clients’ technology visions into high-quality products while reducing costs and improving time-to-market.
