DevSecOps Engineer

Join our platform team to build, secure, and scale a production Azure environment. You'll own real systems hands-on across Kubernetes, cloud infrastructure, CI/CD, and databases — comfortable on both Linux and Windows, moving fast without breaking what matters, with security built into everything you ship. This is a high-growth role with room to deepen your expertise and grow into broader platform ownership and technical leadership. WHAT YOU'LL DO - Operate and improve our AKS clusters — workloads, networking, scaling, upgrades - Manage infrastructure as code with Terraform (modular, reviewable, reproducible) - Build and maintain Azure DevOps CI/CD pipelines that ship safely and quickly - Package and deploy with Helm and containers; keep images and the supply chain clean - Administer and tune Azure SQL for performance, availability, and security - Automate operations with PowerShell and Bash - Design and troubleshoot networking — VNets, routing, DNS, ingress/egress, firewalls - Bake security into IaC, pipelines, and deployments by default — not as a bolt-on WHAT WE'RE LOOKING FOR Strong, demonstrable experience in most of: - AKS / Kubernetes — production workloads, RBAC, network policies, pod security, workload identity - Azure SQL — provisioning, performance, operational ownership - Terraform — maintainable IaC - PowerShell & Bash — scripting and automation - Linux & Windows — operate and troubleshoot both - Networking — segmentation, NSGs, firewalls, private endpoints, WAF/Front Door - Security — least privilege by default; identity/access (Entra ID, RBAC), secrets (Key Vault, managed/federated identities — none in code), image scanning, supply-chain hygiene - DevOps pipelines, containerization (Docker), Helm Depth in several matters more than 10/10 on all. Bonus: enterprise identity, compliance/audit, or a security background. USING AI AS A WORK-MULTIPLIER We expect engineers to use AI tooling (Cursor, Claude Code, etc.) like any powerful tool — to go faster and deeper, not as a crutch or a search box. Candidates passing the first round get a 2–4 hour mini-project mirroring real work. We're testing how you think with AI, not whether you can prompt it. Strong candidates: - Direct the AI deliberately instead of pasting and hoping - Verify, correct, and own every line they ship - Know when to lean on AI and when to reason it out themselves - Deliver a working, defensible result and can walk us through their decisions PROCESS 1. First-round interview 2. The 2–4 hour mini-project (provided after round one) 3. Technical discussion of the project and your experience 4. Final conversation with the team WHY JOIN Real ownership of the systems you run, a team that cares about doing things well, and an environment where good automation and good ideas are rewarded. You'll keep learning fast, with a clear path to grow your scope, seniority, and technical leadership.