Senior DevSecOps Engineer

Responsibilities

• ▹Select, integrate and maintain security tooling within environments and CI/CD pipelines
• ▹Design, implement and enforce automated security guardrails and policies across the entire cloud estate and CI/CD pipeline
• ▹Harden and secure the Google Cloud Platform environment (IAM policies, network security, resource configuration management)
• ▹Work with compliance and governance teams to translate requirements into automated, verifiable infrastructure and deployment practices
• ▹Automate and manage the end-to-end process for identifying, triaging and remediating security vulnerabilities in infrastructure, applications and third-party dependencies
• ▹Build and maintain "golden path" templates for secure service deployment
• ▹Contribute expertise to the security incident response team

Requirements

• ▹Deep, practical experience designing, managing and securing high-availability infrastructure on GCP
• ▹Proficiency in API security: reviewing, providing patterns, upskilling engineers
• ▹Expert knowledge of Kubernetes (GKE) security: network policies, container runtime security, secrets management
• ▹Solid Infrastructure as Code skills (Terraform or OpenTofu)
• ▹Hands-on experience with security tooling (e.g. Aqua Security, Falco, Prisma Cloud or similar CSPM/CWPP/CNAPP solutions)
• ▹Proficiency in at least one automation/scripting language (Python, Golang, or Shell)
• ▹Proven ability to build secure, repeatable CI/CD pipelines

Soft skills

About the company

Yapily builds open banking infrastructure powering leading companies such as Adyen, Intuit QuickBooks and Google, delivering payment initiation, bank data access and pre-built products that let businesses innovate fast.