Senior DevSecOps Engineer - Cloud Security & CI/CD

We are DIGIPAL, a software delivery agency specialising in building high-performing product design and software development teams for clients across Europe and North America. We work with a wide range of organisations from ambitious startups to multinational corporations. We have a unique career opportunity for you to work on building exciting digital products for international clients. Yet, remaining flexible in a remote-only environment and getting a top-tier compensation package.

About the Role:

We are looking for a Senior DevSecOps Engineer to help embed security into every stage of the software delivery lifecycle across AWS and Azure environments. In this role, you will automate security controls, build secure CI/CD pipelines, implement policy-as-code, and integrate security tooling to enable fast, secure, and compliant software delivery.

Working closely with engineering and security teams, you will develop scalable automation, strengthen cloud security posture, and ensure security is built into infrastructure and applications from day one.

Responsibilities:

• Design, build, and secure CI/CD pipelines using GitHub Actions, Azure DevOps, or GitLab CI.
• Integrate SAST, DAST, SCA, secret detection, and vulnerability scanning into development workflows.
• Build and maintain Infrastructure as Code using Terraform, Bicep, or CloudFormation.
• Implement policy-as-code and automated security guardrails.
• Automate deployment of security tools across cloud and container environments.
• Build vulnerability remediation workflows and integrate findings into engineering backlogs.
• Configure centralized logging and SIEM integrations for cloud and application environments.
• Secure Kubernetes environments across AWS and Azure.
• Develop reusable secure infrastructure modules and deployment templates.
• Collaborate with development teams to promote secure engineering practices.

Requirements:

• 5+ years of experience in DevSecOps, DevOps, Cloud Engineering, or Infrastructure Engineering.
• Strong hands-on experience with AWS and Azure cloud platforms.
• Deep experience building and securing CI/CD pipelines.
• Advanced knowledge of Terraform, Bicep, or CloudFormation.
• Experience implementing security tools such as SonarQube, Prisma Cloud, Wiz, Snyk, CrowdStrike, or Microsoft Sentinel.
• Strong understanding of Kubernetes security and container security best practices.
• Experience with policy-as-code tools such as Checkov, Tfsec, or OPA/Rego.
• Experience integrating vulnerability management into engineering workflows.
• Strong scripting skills (Python, Bash, or PowerShell).
• Excellent communication skills and the ability to work closely with both engineering and security teams.
• Professional, proactive, and security-focused mindset.

Nice to Have:

• Experience with Helm, service meshes, and container runtime security.
• Experience working in enterprise or regulated cloud environments.
• Knowledge of SOC 2, ISO 27001, CIS Benchmarks, or similar compliance frameworks.

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

• Experience with SIEM platforms and cloud security monitoring.
• Familiarity with developer platform engineering and internal developer tooling.

Preferred Certifications:

• Certified DevSecOps Professional (CDP) or Practical DevSecOps Certification.
• AWS Certified Security – Specialty.
• Microsoft Certified: Azure Security Engineer Associate (AZ-500).
• Certified Kubernetes Administrator (CKA).
• Certified Kubernetes Security Specialist (CKS).

Our offer:

• 100% remote position.
• Attractive compensation package.
• Long-term B2B contract.
• Opportunities for professional growth and continuous learning.
• Collaboration with top engineering talent from around the globe.
• The chance to build world-class digital products for European and US markets.