DevSecOps Engineer

Revizto enables the people behind the world’s most important structures to do their best work.

We connect architects, engineers, contractors, and owners in one shared 2D/3D environment to

help deliver complex projects on time and on budget. From airports and hospitals to data

centers and large-scale infrastructure, Revizto supports industry leaders in reducing risk,

improving collaboration, and delivering better project outcomes.

Built on a gaming engine, Revizto is designed to handle the scale and complexity of modern

construction projects while remaining fast, reliable, and accessible across devices and

environments - whether teams are in the office or on site.

Key Responsibilities & Requirements

Infrastructure Security & Compliance

As a cornerstone of this role, you will ensure our cloud foundations are resilient and compliant

by design.

• Design and implement secure cloud infrastructure using Terraform/Terragrunt, following
• security best practices and CIS benchmark compliance
• Build vulnerability management workflows: scanning, triage, and remediation across
• cloud and endpoint estate
• Deploy and tune log-aggregation/detection infrastructure for automated incident
• response
• Design network segmentation for containerized and cloud-native environments.
• Expert-level experience with Terraform/Terragrunt across multi-account, multi-region
• environments (5+ years preferred)Kubernetes & Container Security
• You will lead the hardening of our servers, containerized environments and orchestrate secure
• runtime policies.
• Design secure Kubernetes cluster bootstrapping, node hardening, and control-plane configuration
• Implement Pod Security Standards, network policies, and RBAC via IaC
• Establish golden-image programs and container vulnerability scanning/policy enforcement for image registries
• Maintain hands-on experience with container runtime security and registry-integrated scanning

CI/CD & Source Code Security

• In this capacity, you will integrate security directly into the developer experience and supply chain.
• Design secure CI/CD pipeline infrastructure with SAST/DAST integration and security gates
• Implement organization-wide GitHub security policies: branch protection, secret scanning, and dependency management
• Apply knowledge of supply-chain security controls and automated security testing frameworks

Secrets, Identity & Endpoint Hardening

• Manage critical identity infrastructure and enforce rigorous hardening standards across all endpoints
• Implement secrets management infrastructure (e.g., HashiCorp Vault) for application and infrastructure credentials
• Design IAM across cloud environments and support Zero Trust initiatives
• Harden databases (MySQL, PostgreSQL, Redis) against encryption and access-control best practices
• Build backup/DR infrastructure with robust encryption and security controls

Core Skills

• Technical mastery and a proactive troubleshooting mindset are essential for success in this role.
• Proficiency in security automation scripting (Python, Go, or Bash)
• Experience in threat modeling and security architecture review
• Comfortable owning infrastructure troubleshooting through to incident response

Preferred Qualifications

• The ideal candidate brings advanced certifications and experience with specialized security tooling.
• Security certifications such as AWS Security Specialty, CISSP, CCSP, or Azure Security Engineer
• Experience with container security platforms (e.g., Falco, OPA Gatekeeper, Prisma Cloud) and service mesh security (Istio/Linkerd)
• Familiarity with SOAR/security automation platforms and infrastructure penetration testing
• Familiarity with GitOps and secure software supply-chain methodologies

Position Overview

DevSecOps Engineer responsible for security-first infrastructure architecture, threat detection, and compliance across our multi-cloud environment, with primary emphasis on AWS. Alibaba Cloud and GCP are expansion targets - current Terraform/Terragrunt modules and CIS benchmark tooling are AWS-only; this role will help build out equivalent coverage for the other platforms. Owns secure IaC delivery, Kubernetes/container security, and CI/CD supply-chain security.

Why Join Us

• Recognised as one of Switzerland’s Best Managed Companies by Deloitte for three consecutive years from 2024 through
• Company-wide trips, including Armenia in 2023 and Switzerland in 2025, with more to come
• A flexible, employee-focused culture
• An innovative and collaborative team environment
• Great working conditions designed to support your best work