DevSecOps 工程师

About the Role

Ready to shape the security posture of high-scale cloud environments from the ground up? We are seeking a talented DevSecOps Engineer to drive our security roadmap, automate pipelines, and embed a robust security culture directly within our engineering ecosystem. This is a fully on-site opportunity designed for a technical professional who thrives on real-time collaboration, immediate impact, and working side-by-side with world-class engineering teams.

About the Client

Our partner is a tech company building product engineering across Fintech, iGaming, and Marketing. They turn innovative ideas into high-performing engines and launch them at scale. As their exclusive recruitment partner, we manage their full-cycle talent acquisition.

What You Will Do

• Drive and define the strategic direction, security roadmaps, and DevSecOps culture across the entire organization.

• Collaborate closely with DevOps teams to architect secure Kubernetes (EKS) environments, Istio setups, and Service Mesh configurations.

• Champion security principles by mentoring, training, and seamlessly transferring secure architectural services to DevOps support teams.

• Deploy and configure Open Policy Agent (OPA) alongside advanced virtualization configuration security analyzers.

• Harden and optimize CI/CD pipeline security, ensuring infrastructure-as-code (IaC) frameworks like Terraform and Ansible are thoroughly secured.

• Integrate and automate continuous security scanning tools directly into the deployment pipelines.

• Eliminate manual overhead by writing automation workflows for complex security processes and compliance checks.

What You Bring

• Core DevOps & Cloud Expertise: Strong foundation in DevOps methodologies, CI/CD pipelines, and cloud security architectures (AWS or GCP).

• Orchestration & IaC: Hands-on experience with Kubernetes, service mesh technologies, and configuration management tools (such as Terraform, Ansible, or Chef).

• Security & Infrastructure Auditing: Proven experience analyzing cloud infrastructure for information security risks and executing mitigation strategies.

• Identity & Access Management: Deep knowledge of automating access controls and implementing secrets management tools (like HashiCorp Vault or privileged user control systems).

• Secure SDLC: A strong understanding of secure software development lifecycle (SSDLC) principles, ideally using frameworks like OWASP SAMMv2.

• Technical Fundamentals: Proficient with version control systems (Git), web server and database administration, the TCP/IP protocol stack, and the OSI model.

What's in It for You

• True Ownership: You will have the autonomy to influence our security roadmap and make architectural decisions that protect our production environments.

• Impactful Work: Your work directly safeguards real-money flows and critical financial data, making a tangible difference in the security of our users.

• Collaborative Culture: Join a cross-functional team of experts in engineering, fraud, and payments who value security and knowledge sharing.

• Continuous Growth: We invest in your professional development through support for advanced certifications, conference attendance, and research time.

• Competitive Benefits: We offer a comprehensive benefits package, including competitive compensation, health coverage, and flexible working arrangements.