{"id":3681954,"url":"https://alion.io/job/bokra-senior-devops-engineer-platform-devsecops","title":"Senior DevOps Engineer (Platform & DevSecOps)","company":{"id":3898443,"name":"Bokra","domain":"bokra.com","url":"https://alion.io/company/bokra-2","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cairo, Egypt"],"countries":["EG"],"hiring_countries":["EG"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"ArgoCD","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"Datadog","optional":false},{"name":"DNS","optional":false},{"name":"Falco","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Go","optional":false},{"name":"Grafana","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"ISO 27001","optional":false},{"name":"KEDA","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Loki","optional":false},{"name":"OpenSearch","optional":false},{"name":"OpenTelemetry","optional":false},{"name":"PCI DSS","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Prometheus","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SIEM","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"Terragrunt","optional":false},{"name":"Trivy","optional":false},{"name":"Zero Trust","optional":false},{"name":"Ansible","optional":true},{"name":"Docker","optional":true},{"name":"FluxCD","optional":true},{"name":"GitOps","optional":true},{"name":"Helm","optional":true},{"name":"Istio","optional":true},{"name":"Linkerd","optional":true},{"name":"OpenStack","optional":true},{"name":"VMWare","optional":true},{"name":"Wazuh","optional":true}],"status":"live","first_seen_at":"2026-11-03T12:46:14Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-04T13:41:04Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"ABOUT THE ROLE\nThe Senior DevOps Engineer designs, automates, and maintains high-availability, fault-tolerant, and secure infrastructure powering digital financial products (e.g., nano-finance, consumer finance, e-payments, digital insurance brokerage).\nOperating within an FRA-regulated environment, this role bridges core software development and the CISO’s governance framework. The engineer is responsible for embedding DevSecOps pipelines, automated compliance controls, immutable audit logging, and Disaster Recovery (DR) automation into every layer of the cloud and on-premise infrastructure.\nKEY RESPONSIBILITIES\n1. DevSecOps & CI/CD Automation\nDesign, build, and maintain automated CI/CD pipelines (e.g., GitLab CI, GitHub Actions, ArgoCD) ensuring zero-downtime blue/green or canary deployments.\nEnforce \"shift-left\" security controls directly into deployment workflows: integrate automated SAST (Static Application Security Testing), DAST, software composition analysis (SCA), and container image vulnerability scanners (e.g., SonarQube, Snyk, Trivy).\nEnforce binary authorization and artifact signing, ensuring only cryptographically verified images are deployed to production clusters.\n2. Infrastructure as Code (IaC) & Cloud Architecture\nArchitect and manage scalable cloud infrastructure (AWS / Microsoft Azure / local data centers) using Terraform or Terragrunt, maintaining 100% declarative infrastructure.\nEnsure infrastructure architecture strictly satisfies Egyptian data residency and hosting regulations as outlined under FRA Decree No. 139/2023 and Decree No. 141/2023 (Fintech Outsourcing Register).\nImplement network zoning, Micro-segmentation, Virtual Private Clouds (VPCs), and Zero-Trust access rules to isolate microservices, payment gateways, and core non-banking ledger systems.\n3. Container Orchestration & Platform Engineering\nManage production-grade Kubernetes clusters (EKS, AKS, or bare metal) focusing on multi-tenancy, resource optimization, autoscaling (HPA/KEDA), and high availability.\nImplement Kubernetes security standards: Network Policies, Role-Based Access Control (RBAC), Pod Security Standards, and runtime threat detection (e.g., Falco).\nProvide self-service internal developer platforms (IDPs) that allow product developers to provision test environments and deploy services safely.\n4. High Availability, BCM & Disaster Recovery (DR)\nBuild and automate Disaster Recovery failover protocols to satisfy FRA business continuity thresholds for Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO).\nAutomate continuous database backups, snapshot replication, and cross-region/cross-zone synchronization.\nLead semi-annual scheduled DR failover drills alongside the CISO and Risk teams, proving operational resilience during simulated complete data center outages.\n5. Regulatory Logging, Telemetry & Observability\nDeploy enterprise-wide observability stacks (Prometheus, Grafana, OpenTelemetry, ELK/OpenSearch, Datadog).\nConstruct tamper-evident, centralized audit log pipelines that stream system, database, and administrative actions directly to the SOC/SIEM, enforcing the FRA’s mandatory five-year log retention and immutability rules.\nConfigure real-time alerts, synthetic monitoring, and SLO/SLI tracking across mission-critical endpoints (digital onboarding, eKYC, and transaction routing).\n6. Secrets, Cryptography & eKYC Infrastructure Support\nOversee enterprise secret management using tools like HashiCorp Vault, enforcing short-lived credentials, automated secret rotation, and dynamic database credentials.\nSupport engineering pipelines that interface with Cloud HSMs and digital signature modules used to seal digital contracts under FRA Decree No. 140 of 2023.\nTechnical Stack\nCloud & Virtualization: AWS, Microsoft Azure, VMware / OpenStack.\nContainers & Orchestration: Docker, Kubernetes (EKS/AKS), Helm, Istio / Linkerd.\nInfrastructure as Code & Config: Terraform, Terragrunt, Ansible.\nCI/CD & GitOps: GitLab CI, GitHub Actions, ArgoCD, FluxCD.\nSecurity & Compliance: HashiCorp Vault, Trivy, Snyk, SonarQube, Wazuh, Falco.\nObservability: Prometheus, Grafana, Loki, ELK/OpenSearch, Datadog.\nScripting & Languages: Python, Bash, Go.\nREQUIREMENTS\nRequired Qualifications & Experience\n1. Education\n- Bachelor’s degree in computer science, Software Engineering, Computer Information Systems, or a related field.\n2. Experience\n- 5-8 years of overall IT/Software Engineering experience, with at least 4 years dedicated to DevOps, Site Reliability Engineering (SRE), or Platform Engineering in a FinTech, Digital Banking, or highly regulated transactional environment.\n3. Regulatory & Security Understanding\n- Proven track record working under strict InfoSec oversight (ISO 27001, PCI-DSS, or central bank/financial regulator standards); familiarity with Egypt's data privacy (PDPL 151/2020) and FRA IT requirements.\n4. Certifications (Preferred)\n- At least one certified tier: Certified Kubernetes Administrator (CKA), AWS Certified DevOps Engineer - Professional, Microsoft Certified: DevOps Engineer Expert, or HashiCorp Certified: Terraform Associate.\n5. Hands-On Depth\n- Strong troubleshooting acumen across Linux kernel internals, TCP/IP networking, DNS, TLS/SSL termination, and distributed systems performance tuning.\nCore Competencies\nSecurity-First Mentality: Considers security and auditability as non-negotiable architectural foundations rather than an afterthought.\nAutomation Advocate: Intolerance for manual, error-prone operational tasks (\"toil\"); proactive in writing clean automation scripts and IaC modules.\nIncident Ownership: Proven ability to troubleshoot complex production outages under pressure, conducting blameless post-mortems and driving systemic fixes.\nCommunication: Ability to collaborate seamlessly with software engineers, product managers, quality assurance, and external regulatory auditors.","description_format":"text","description_chars":5895,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Egypt","iso":"EG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Asset Management & Funds","Investing Apps & Robo-Advisors"],"lifecycle":[{"event":"open","at":"2026-11-03T13:28:55Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":7,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/bokra-senior-devops-engineer-platform-devsecops","json_url":"https://alion.io/job/bokra-senior-devops-engineer-platform-devsecops.json","meta":{"generated_at":"2026-11-04T15:24:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23510,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3898443},"rest":"https://alion.io/mcp/rest/get_company?id=3898443"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbokra-senior-devops-engineer-platform-devsecops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbokra-senior-devops-engineer-platform-devsecops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbokra-senior-devops-engineer-platform-devsecops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bokra-senior-devops-engineer-platform-devsecops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbokra-senior-devops-engineer-platform-devsecops"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3681954}},{"tool":"search_jobs","arguments":{"company":"bokra.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3681954},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}