Текст заказа
Overview:
Infrastructure engineering with security embedded across the entire technology stack, including CI/CD, Kubernetes, cloud environments, secrets management, and access control.
Key responsibilities:
Core Responsibilities
* Integrate security checks into CI/CD pipelines, including dependency, container image, Infrastructure as Code (IaC), and secret scanning
* Harden servers, Kubernetes clusters, and cloud environments in accordance with CIS benchmarks
* Manage secrets, certificates, and the PKI lifecycle using Vault
* Manage access control (SSO, IAM, least privilege) and conduct regular access reviews
* Track and remediate vulnerabilities, coordinating patching activities across development and infrastructure teams
* Support security incident investigations, incident response, audits, and compliance activities
* Enforce Kubernetes runtime and policy security, including RBAC, network policies, Pod Security Standards (PSS), and Kyverno/OPA
Infrastructure Responsibilities
* Set up and maintain production and staging infrastructure, including updates and incident resolution
* Improve infrastructure setup and maintenance processes
* Support and develop GitLab CI pipelines
* Contribute to the design of complex IT systems
* Collaborate with product development teams and stakeholders
* Handle monitoring events, including periodic day and night on-call duties
Required Experience:
* 3+years of experience as a System Engineer, SRE, or DevOps Engineer
* Solid Linux administration and troubleshooting skills
* Experience with configuration management tools such as Ansible, SaltStack, Terraform, or Pulumi
* Experience with Kubernetes and Helm
* Experience configuring GitLab CI/CD pipelines
* Experience with Anti-DDoS solutions, WAF, and WAAP (Cloudflare, Fastly, Akamai, etc.)
* Experience with monitoring tools (Prometheus stack, Zabbix)
* Strong understanding of information security fundamentals, including least privilege, defense in depth, network security, and TLS/PKI
* Experience with secrets management solutions such as HashiCorp Vault or similar
* Strong problem-solving skills
* Higher technical education
* English level B1+ and strong command of Russian
Our Benefits:
* Private health insurance
* Sports benefits
* Comprehensive Mental Health Program
* Free English lessons (online)
* Local language courses
* Paid time off
* Maternity leave support
* Referral program rewards
* Upskilling, internal workshops, and participation in professional conferences and corporate events