DevSecOps Engineer

Team Summary We specialise in securing Linux edge devices operating in live customer environments. Our DevSecOps engineers collaborate directly with client architects, software developers, and cloud engineering teams. Job Summary We are looking for a Senior DevSecOps Engineer with deep Linux and security expertise and strong AWS skills. You will own a workstream end to end, from hardened OS images and secure updates to device identity and secure CI/CD, and will be ready to support other AWS initiatives when needed. Responsibilities & Duties Contribute to architecture and design decisions for secure device management, identity, and updates Build and maintain hardened Linux OS images and configuration baselines aligned with security standards Design and implement secure, reliable update mechanisms for a fleet of edge devices, including offline sites Implement device identity, certificate management, and secure remote access Run containerized workloads on edge devices securely Build and maintain CI/CD pipelines with built-in security: scanning, SBOM, and artifact signing Develop and support cloud services and infrastructure on AWS using infrastructure-as-code Set up monitoring, logging, and alerting for devices and cloud services Automate testing of OS, update, and security changes before they reach production Support vulnerability management and security reviews with the client's InfoSec team Collaborate with fellow DevSecOps engineers and the client's teams; document solutions and hand them over to the internal team Qualifications & Skills Use AI coding agents (Cursor, Claude Code, or similar) as the primary development workflow; review, test, and own all generated code 5+ years of commercial experience in DevSecOps, DevOps, and Linux systems engineering including with a strong security focus Expert knowledge of Linux (Ubuntu/Debian) internals and administration Hands-on experience with Linux hardening (CIS benchmarks, AppArmor or SELinux, auditd, firewalls) Practical experience with PKI, TLS, and certificate management Hands-on experience with containers and container security Experience building secure CI/CD pipelines (SAST, SCA, image scanning, SBOM, signing) Strong AWS experience, including IAM, networking, and security services We offer multiple benefits that include The environment of equal opportunities, transparent and value-based corporate culture and an individual approach to each team member Competitive compensation and perks Opportunity to receive a Performance Bonus for your individual achievements and a Loyalty Bonus recognizing your dedication to the company Gig-contract 21 paid vacation days per year, paid public holidays according to the Ukrainian legislation Development opportunities like corporate courses, knowledge hubs, and free English classes as well as educational leaves Medical insurance is provided from day one. Sick leaves and medical leaves are available Remote working mode is available within Ukraine only Free meals, fruits, and snacks when working in the office.