Senior/Lead DevSecOps Engineer

Описание

WE ARE

SoftServe is a dynamic digital service and consulting company, founded in 1993, with a global presence across the USA, Europe, APAC, and LATAM regions. Our team of skilled professionals collaborates on over 2,000 projects, driving transformation and optimizing business strategies for ISVs and Fortune 500 companies.

Our Critical Services Center of Excellence (CoE) is a group of passionate technologists specializing in software architecture, startups, and enterprise platforms. As part of SoftServe’s Cybersecurity Practice Team, we help clients build trust in their systems by delivering reliable, tailored security solutions. We don’t just identify gaps – we guide organizations through every step of the improvement journey, making sure they’re equipped to handle today’s threats and tomorrow’s challenges.

With deep expertise across a wide range of technologies, we adapt our approach to meet each client’s unique needs. Our team covers a broad spectrum of cybersecurity domains: cost optimization & migration efficiency, infrastructure and application modernization, regulatory compliance & governance excellence, security posture strengthening, data protection and privacy assurance, and secure use of AI.

We are a diverse, distributed team with members based in Poland, Ukraine, Spain, and other European countries, collaborating across borders to deliver world-class cybersecurity solutions.

IF YOU ARE

An expert with 5+ years of experience in DevOps and Security EngineeringPassionate about building secure cloud infrastructure (AWS, Azure, GCP) for software development lifecycle needsStrong in several security domains ( IAM, IaaS, network) and willing to learn othersSkilled in at least one major cloud provider (AWS preferred) and its security servicesExperienced with identity and access management platforms (IdP, IGA, PAM) and concepts (SAML, Oauth OIDC)Familiar with modern DevSecOps tooling (SAST, DAST, SCA, IaC scanning)Confident with securing CI/CD pipelinesCompetent in performing threat modeling and risk assessments for cloud-native applications and architecturesStrong in automation and scripting skills (Python, Go or similar)A professional with strong communication skills to work with cross-functional teamsCapable of communicating in English freely in a multicultural environment

AND YOU WANT TO

Develop and implement security measures throughout the software development lifecycle, including requirements gathering, design, development, testing, and deployment phasesBuild and maintain automated pipelines for authoritative asset and Software Bill of Materials (SBOM) generationImplement and manage scalable IAM guardrails for cloud (AWS/GCPAzure) and corporate (Okta) environmentsContribute to the technical roadmap and execute on projects for data protection, including key management, encryption, and tokenizationDevelop and implement secure configurations for containerized (Kubernetes, EKS) and IaC (Terraform) workflowsWork with SRE and GRC team to test and validate resilience patterns and disaster recovery capabilitiesProvide clear technical context on security controls and architecture to GRC and Internal Audit teamsDevelop and enforce security policies, standards, and procedures, ensuring compliance with relevant regulations and industry best practicesStay up to date with the latest security threats, vulnerabilities, and industry trends, and provide recommendations on security enhancements and risk mitigation strategiesCollaborate with cross-functional teams to educate and promote security awareness, conducting training sessions and workshops on secure coding practices and security-related topics

TOGETHER WE WILL

Gain certifications from leading providers (Google, AWS & others)Empower you to scale your expertise with others by joining the Mentoring ProgramExcel business of our clients from startups and ISVs to Enterprise and Fortune 500 companiesCreate an exceptional customer experience and impact the company's global success, and be recognized by the Customer Hero ProgramCare for your wellness with a health insurance packageCode! The project is not overwhelmed with meetings and other non-development-related activitiesSupport hundreds of thousands of people every day by helping them not to waste precious time on maintaining healthy nutritionHelp you with your individual initiatives — we are open to them, just come and share your ideas!