System Engineer / DevSecOps – Senior

Overview:

Infrastructure engineering with security embedded across the entire technology stack, including CI/CD, Kubernetes, cloud environments, secrets management, and access control.

Key responsibilities:

Core Responsibilities

• Integrate security checks into CI/CD pipelines, including dependency, container image, Infrastructure as Code (IaC), and secret scanning
• Harden servers, Kubernetes clusters, and cloud environments in accordance with CIS benchmarks
• Manage secrets, certificates, and the PKI lifecycle using Vault
• Manage access control (SSO, IAM, least privilege) and conduct regular access reviews
• Track and remediate vulnerabilities, coordinating patching activities across development and infrastructure teams
• Support security incident investigations, incident response, audits, and compliance activities
• Enforce Kubernetes runtime and policy security, including RBAC, network policies, Pod Security Standards (PSS), and Kyverno/OPA

Infrastructure Responsibilities

• Set up and maintain production and staging infrastructure, including updates and incident resolution
• Improve infrastructure setup and maintenance processes
• Support and develop GitLab CI pipelines
• Contribute to the design of complex IT systems
• Collaborate with product development teams and stakeholders
• Handle monitoring events, including periodic day and night on-call duties

Required Experience:

• 3+years of experience as a System Engineer, SRE, or DevOps Engineer
• Solid Linux administration and troubleshooting skills
• Experience with configuration management tools such as Ansible, SaltStack, Terraform, or Pulumi
• Experience with Kubernetes and Helm
• Experience configuring GitLab CI/CD pipelines
• Experience with Anti-DDoS solutions, WAF, and WAAP (Cloudflare, Fastly, Akamai, etc.)
• Experience with monitoring tools (Prometheus stack, Zabbix)
• Strong understanding of information security fundamentals, including least privilege, defense in depth, network security, and TLS/PKI
• Experience with secrets management solutions such as HashiCorp Vault or similar
• Strong problem-solving skills
• Higher technical education
• English level B1+ and strong command of Russian