DevSecOps Engineer – Remote Work Type

We are looking for a DevSecOps Engineer to join a project for our client, an international company operating across multiple markets. You will join a small platform team responsible for Azure, Kubernetes, deployments, Microsoft 365, and on-call support. The role combines platform engineering and DevOps responsibilities with ownership of security engineering practices. You will support the client's migration from a monolithic architecture to services while ensuring platform stability and support the technical side of ISO 27001 certification journey.

• 5+ years of professional experience in Platform Engineering, DevOps, or similar roles
• Strong hands-on experience with Microsoft Azure and Kubernetes/AKS in production environments including cluster building, pipelines, upgrades, and support
• Hands-on experience in security engineering and ownership of security-related processes
• Experience with technical aspects of ISO 27001 or equivalent security frameworks; managing vulnerability management processes end-to-end
• Practical knowledge of security tooling including external attack surface monitoring, DAST, SAST, SCA, secrets scanning, container scanning, and cloud security posture management
• Experience with Azure DevOps and CI/CD pipelines
• Experience with Infrastructure as Code and infrastructure automation
• Scripting and automation skills using Bash, PowerShell, or Python
• Ability to document technical processes and security controls and communicate technical topics to customers, security teams, and auditors
• Ability to independently prioritize tasks and take ownership in a small, senior team environment
• Fluent in English

Nice to have:

• Knowledge of Estonian or German
• Previous experience working with enterprise or banking customers and supporting security audits
• Experience supporting organizations through security certification programmes
• Experience in modernization projects involving migration from monolithic to service architectures

• Running and maintaining the platform with Azure, AKS, deployments, upgrades, incident response, and on-call support
• Building and operating infrastructure for migration from monolithic architecture to services including environments, Azure DevOps CI/CD pipelines, Infrastructure as Code, monitoring, and alerting
• Managing external attack surface, inventory of internet-facing assets, and exposure monitoring
• Integrating security into Azure DevOps and Kubernetes delivery pipelines, including code, dependency, secrets, container, and Infrastructure as Code scanning
• Establishing and maintaining Azure and Microsoft 365 security baseline, including identity and access management, MFA, cloud security posture, Microsoft Defender, and access management processes
• Managing end-to-end vulnerability management process including identification, coordination of fixes, verification, and evidence maintenance
• Managing technical security controls supporting ISO 27001 certification programme in collaboration with compliance lead
• Providing technical input for customer security questionnaires and audits; participating in discussions with customers and auditors
• Supporting penetration testing activities by defining scope, coordinating tests, and ensuring resolution of findings
• Automating operational and security processes to continuously improve platform reliability and security

Please be advised that we will only contact selected candidates.