Senior DevSecOps Engineer

CommIT is looking for a Senior DevSecOps Engineer to own the company's AWS infrastructure and Kubernetes platform with security integrated. The role involves working closely with Python backend, data, and AI teams.

• 5+ years in DevOps / SRE / platform engineering, with 3+ years running AWS and Kubernetes in production.
• Hands-on production experience in cloud and infrastructure security including IAM, KMS/secrets, network security, GuardDuty, Security Hub.
• Experience with EKS, ECS, Lambda, S3, RDS, VPC.
• Proficiency in Terraform / infrastructure as code.
• Experience with secure CI/CD and DevSecOps tooling (SAST, image and dependency scanning).
• Knowledge of observability and incident response tools (Prometheus, Grafana, ELK, CloudWatch).
• Experience with Docker / containerization.
• Scripting skills in Python and Bash.
• Strong Linux and networking fundamentals.
• Based in Poland; fluent English.

Nice to have:

• Certifications: AWS Security Specialty, CKS, CISSP.
• SOC 2 / ISO 27001 compliance experience.
• Experience with SIEM tooling, threat modeling.
• Experience with ArgoCD / GitOps.
• Infrastructure for ML/LLM workloads.
• Experience with FinOps / cloud cost optimization.

• Design, secure, and operate AWS infrastructure including EKS, ECS, Lambda, S3, RDS, VPC, and IAM.
• Own cloud security: least-privilege IAM, encryption at rest and in transit (KMS), secrets management, network segmentation, and threat detection (GuardDuty, Security Hub, CloudTrail).
• Harden production Kubernetes with RBAC, network policies, pod security standards, admission control, and runtime security.
• Manage infrastructure as code with Terraform, including policy-as-code and security guardrails.
• Build CI/CD pipelines with integrated security tools: SAST, dependency scanning, container image scanning and signing, secret detection.
• Own monitoring, logging, alerting; lead incident response, including security incidents and post-mortems.
• Run vulnerability management, patching, and remediate audit findings.
• Support data and AI/LLM workloads securely and manage cloud costs.

Based in Poland; fluent English required.