Jobs / Lepaya
DevSecOps
Lepaya · Amsterdam, NH, Netherlands
Amsterdam, NH, NetherlandsExp: 4+ yrsHybrid
Remuneration
Not specified
Location
Amsterdam, NH, Netherlands
Visa sponsorship
No visa sponsorship
We are only hiring for candidates who are able to work in the Netherlands.
Job summary
The DevSecOps Engineer builds and secures the cloud platform that supports a learning product, embedding security into infrastructure, CI/CD pipelines, and developer workflows. The role manages multi-account AWS infrastructure with Terraform, automates policy enforcement and audit evidence, and improves monitoring with Grafana Cloud and OpenTelemetry to help engineering teams deliver secure, reliable services.
Benefits
Work-to-live wellbeing schemeUnlimited holidaysEvery other Friday offWork from anywhere for 8 weeks per yearWellbeing partner accessLearning and development opportunitiesInternal career development and hiring program
Qualifications
- At least 4 years of experience in DevOps, Platform, Cloud, or Security Engineering, preferably in a startup or scale-up.
- Hands-on experience with AWS and Terraform.
- Familiarity with CI/CD pipelines using GitHub Actions or similar tools.
- Experience with Docker and cloud-native orchestration services.
- Understanding of cloud security fundamentals, including IAM, hardening, encryption, network security, and secrets management.
- Hands-on experience in at least one area of security automation, such as vulnerability scanning, SAST/SCA, policy-as-code, or cloud security posture management.
- Scripting skills in Bash or Python; TypeScript experience is a plus.
- Strong English communication skills.
- Tech compliance experience, such as ISO 27001, SOC 2, or GDPR, is a plus.
- Exposure to DAST tools, offensive security, software supply chain security, or GCP is a plus.
Responsibilities
- Build and improve AWS infrastructure with Terraform, applying least-privilege IAM, encryption, and network controls.
- Embed dependency, container, and secrets scanning into CI/CD pipelines and make results actionable.
- Introduce policy-as-code checks to detect infrastructure misconfigurations before merging.
- Develop secure-by-default infrastructure modules for engineering teams.
- Strengthen identity management, threat detection, and vulnerability management across a multi-account AWS organization.
- Automate compliance controls and collect audit-ready evidence in collaboration with security and IT teams.
- Improve monitoring and observability, including security signals and alerting, with Grafana Cloud and OpenTelemetry.
- Automate repetitive processes and improve the developer experience.
Skills
AirflowAWSAWS KMSBashCheckovCloudFrontCloudWatchDockerDynamoDBECSFargateGCPGitHubGitHub ActionsGrafanaGrafana CloudIAMAWS LambdaLokiNGINXNode.jsOpen Policy AgentOpenTelemetryOpenVPNPackerPostgreSQLPythonRoute 53S3SentrySlackSnykSonarQubeTerraformTrivyTypeScriptJavaScript
Languages
English
Work schedule
Flexible hours
Industry
Workplace learningUpskilling
Relocation
No