DevSecOps Engineer – Remote Work Type
Directio Sp. z o.o.3 hours ago
Remote, PolandSenior
Responsibilities
- Run and maintain the Azure and Kubernetes platform, including AKS, deployments, upgrades, incident response, and on-call support.
- Build and operate infrastructure, environments, CI/CD pipelines, monitoring, and alerting for a migration from monolithic architecture to services.
- Manage the external attack surface, internet-facing asset inventory, exposure monitoring, and vulnerability remediation.
- Integrate code, dependency, secrets, container, and Infrastructure as Code scanning into Azure DevOps and Kubernetes delivery pipelines.
- Establish and maintain Azure and Microsoft 365 security baselines, identity and access management, MFA, cloud security posture, Microsoft Defender, and access-management processes.
- Own vulnerability management from identification and remediation coordination through resolution verification and evidence maintenance.
- Support technical security controls for the ISO 27001 certification program and provide technical input for customer security questionnaires and audits.
- Coordinate externally performed penetration testing and ensure findings are properly addressed.
- Automate operational and security processes while improving platform reliability and security.
Requirements
- 5+ years of professional experience in Platform Engineering, DevOps, or a similar role.
- Strong hands-on production experience with Microsoft Azure and Kubernetes/AKS, including clusters, pipelines, environments, upgrades, and production support.
- Hands-on security engineering experience with ownership of security-related processes.
- Experience with the technical side of ISO 27001 or an equivalent security framework, or end-to-end vulnerability management experience.
- Practical knowledge of external attack-surface monitoring, DAST, SAST, SCA, secrets scanning, container scanning, and cloud security posture management.
- Experience with Azure DevOps, CI/CD pipelines, Infrastructure as Code, and infrastructure automation.
- Scripting and automation skills using Bash, PowerShell, or Python.
- Ability to document technical processes and security controls and communicate clearly with customers, security teams, and auditors.
- Ability to prioritize independently and take ownership in a small, senior team environment.
- Fluency in English.
- Knowledge of Estonian or German is desirable.
- Experience with enterprise or banking customers, customer security audits, security certification programs, or modernization projects is desirable.
Benefits
- Remote work type.
- Private healthcare.
- Multisport card.
- Training opportunities.
- B2B contract arrangement.
- Salary stated as 25 000–33 000 PLN netto.
Tech Stack
About Directio Sp. z o.o.
Directio Sp. z o.o. is a Warsaw-based IT services firm that builds and operates cloud and mobile applications, provides software development, DevOps, data management, and 24/7 support, and offers team and staff augmentation. It is privately held, founded in 1996, and delivers projects from Poland, the Philippines, Mexico, and the United States for clients in FMCG, retail, automotive, SaaS, and IT services.