System Engineer / DevSecOps – Senior

Overview:

Infrastructure engineering with security embedded across the entire technology stack, including CI/CD, Kubernetes, cloud environments, secrets management, and access control.

Key responsibilities:

Core Responsibilities

• Integrate security checks into CI/CD pipelines, including dependency, container image, Infrastructure as Code (IaC), and secret scanning

• Harden servers, Kubernetes clusters, and cloud environments in accordance with CIS benchmarks

• Manage secrets, certificates, and the PKI lifecycle using Vault

• Manage access control (SSO, IAM, least privilege) and conduct regular access reviews

• Track and remediate vulnerabilities, coordinating patching activities across development and infrastructure teams

• Support security incident investigations, incident response, audits, and compliance activities

• Enforce Kubernetes runtime and policy security, including RBAC, network policies, Pod Security Standards (PSS), and Kyverno/OPA

Infrastructure Responsibilities

• Set up and maintain production and staging infrastructure, including updates and incident resolution

• Improve infrastructure setup and maintenance processes

• Support and develop GitLab CI pipelines

• Contribute to the design of complex IT systems

• Collaborate with product development teams and stakeholders

• Handle monitoring events, including periodic day and night on-call duties

Required Experience:

• 3+years of experience as a System Engineer, SRE, or DevOps Engineer

• Solid Linux administration and troubleshooting skills

• Experience with configuration management tools such as Ansible, SaltStack, Terraform, or Pulumi

• Experience with Kubernetes and Helm

• Experience configuring GitLab CI/CD pipelines

• Experience with Anti-DDoS solutions, WAF, and WAAP (Cloudflare, Fastly, Akamai, etc.)

• Experience with monitoring tools (Prometheus stack, Zabbix)

• Strong understanding of information security fundamentals, including least privilege, defense in depth, network security, and TLS/PKI

• Experience with secrets management solutions such as HashiCorp Vault or similar

• Strong problem-solving skills

• Higher technical education

• English level B1+ and strong command of Russian

Our Benefits:

• Private health insurance

• Sports benefits

• Comprehensive Mental Health Program

• Free English lessons (online)

• Local language courses

• Paid time off

• Maternity leave support

• Referral program rewards

• Upskilling, internal workshops, and participation in professional conferences and corporate events