DevSecOps Engineer

Ingemark is a custom software development agency trusted by some of the largest companies in Southeast Europe, as well as by companies from Western Europe, the Middle East, and the U.S. We love technology, but our true passion lies in using it to help our clients run their businesses better.

Join our team as a DSO Engineer and help shape the cloud foundation for a major international enterprise. In this role, you’ll share ownership of multi-cloud architecture, governance, and landing zones across AWS, Azure, and GCP, while maintaining core enterprise tooling, including GitHub, Terraform Cloud, Datadog, PagerDuty, and AWX/Ansible.

Your focus will be operational: keeping these services running, secure, and well-automated, and ensuring incidents and requests are handled during your hours as part of a follow-the-sun support model.

What you’ll do

• Respond to incidents and alerts on services owned by the team (AWS, Azure, GCP, Datadog, PagerDuty, GitHub, Terraform Cloud, AWX) as part of a PagerDuty on-call rotation
• Triage incoming requests from ServiceNow, PagerDuty, and Microsoft Teams, then resolve them directly or route them to the team’s Jira backlog
• Identify the root cause of technical problems and implement fixes, following the team’s agreed processes
• Handle day-to-day “keep the lights on” work, such as onboarding users and teams to platform tools, managing access, making configuration changes, and troubleshooting pipelines and automation
• Help maintain cloud landing zones and guardrails, including policies, IAM, and network configuration, in line with the client’s governance standards
• Make infrastructure changes through code, using Terraform (Terraform Cloud) and Ansible (AWX), via GitHub-based workflows
• Build and improve the CI/CD pipelines and automation used to deliver and deploy changes, keeping them reliable and performant
• Help keep the platform secure by reviewing and testing infrastructure code and configuration for security risks and acting on the findings
• Write and improve runbooks and documentation so the next incident is faster to resolve than the last one
• Escalate to senior engineers when needed, with a clear handover of what was checked and found
• Contribute to the team’s project work when operational load allows

What we’re looking for

• 2+ years of experience in cloud operations, DevOps, SRE, or a similar role
• Hands-on experience with at least one of AWS, Azure, or GCP
• Solid cloud fundamentals: IAM, networking (VPC/VNet, DNS, firewalls, and security groups), compute, and storage
• Day-to-day experience with Terraform 
• Git and GitHub, including pull requests and GitHub Actions
• Strong Linux/Unix knowledge (administration, processes, file systems, networking, permissions) and scripting skills in Bash or Python 
• Experience with Docker containers: building, optimizing, and securing images
• Experience with monitoring and centralized logging tools (e.g., Datadog, Prometheus, Grafana, ELK) to detect anomalies and incidents
• Experience handling incidents: on-call, triage, structured troubleshooting, and working through problems without a ready-made runbook
• Experience with ticket-based work (ServiceNow, Jira, or similar)
• Fluent in written and spoken English

It’s a big plus if you have

• Experience with Datadog (monitors, dashboards, integrations) and PagerDuty administration
• Ansible, ideally AWX/Ansible Tower
• Terraform Cloud/Enterprise experience, including workspaces and policy as code (Sentinel/OPA)
• Landing zone and governance experience: AWS Organizations, Control Tower, and SCPs; Azure Landing Zones and Azure Policy; GCP organization policies
• A cloud certification (e.g., AWS SysOps Administrator or Solutions Architect Associate, Azure Administrator AZ-104, GCP Associate Cloud Engineer)
• Kubernetes (EKS, AKS or GKE)
• Familiarity with ITIL incident and change management

What we offer

• Choose your work location: remote / hybrid / in office
• Educational budget (books, lectures, courses, conferences)
• Christmas, vacation, and a new baby bonus
• Paid kindergarten
• 100% covered Multisport Card