Role Overview
Join a team dedicated to advancing cybersecurity through robust infrastructure and automation. As a Senior DevOps Engineer, you will play a central role in building and maintaining secure, highly available systems that support long-term client engagements. Your responsibilities will span cloud and on-prem deployments, with a strong emphasis on integrating security into every phase of the development lifecycle.
Key Responsibilities
- Design, implement, and manage CI/CD pipelines using tools like GitHub Actions, GitLab CI, and Jenkins to support both cloud and embedded applications
- Automate build, test, packaging, and deployment workflows for Android and firmware-based systems
- Build and maintain PKI infrastructure, including certificate lifecycle management and secure key handling practices
- Integrate Hardware Security Modules (HSMs) such as Thales, AWS CloudHSM, or Azure Key Vault HSM into signing services
- Embed firmware and code signing processes into continuous integration pipelines
- Develop and maintain automation for secure key provisioning, rotation, and access control
- Deploy and manage security tooling including SAST, DAST, CVE scanners, secret detection, and SBOM generation (CycloneDX, SPDX)
- Ensure infrastructure resilience through high availability, disaster recovery planning, and proactive monitoring
Required Qualifications
- Master’s or Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or a related field, or equivalent hands-on experience
- Minimum of 5 years in DevOps, Cloud Engineering, or infrastructure roles with automation focus
- Proven experience with Jenkins, Gerrit, and modern CI/CD platforms
- Hands-on experience with at least one major cloud provider (AWS, Azure, or GCP)
- Proficiency with infrastructure-as-code tools such as Terraform or Ansible
- Strong command of Linux systems, networking fundamentals, and secure architecture principles
- Direct experience integrating DevSecOps tools into development pipelines
- Familiarity with containerization (Docker) and orchestration (Kubernetes)
- Fluent English communication skills, both written and verbal
- Willingness to travel as needed for project delivery
Preferred Background
- Experience with public key infrastructure, certificate authorities, and trust models
- Hands-on work with HSMs in production environments
- Background in firmware or embedded systems development workflows
- Knowledge of SBOM standards and tooling such as CycloneDX or SPDX
- Automation experience in cryptographic key lifecycle management
- Programming proficiency in Python, Go, or similar languages
Work Environment
This is a hybrid role with flexibility in location, requiring occasional travel. You’ll work within a culture that values precision, curiosity, and integrity, collaborating across technical teams to deliver secure, innovative solutions. The ideal candidate thrives in structured yet adaptive environments and is committed to protecting systems through thoughtful engineering.
