Building and improving our AWS infrastructure using Terraform, with security designed in from the start: least-privilege IAM, encryption, and network controls as defaults, not afterthoughts.Embedding security into our CI/CD pipeline: dependency, container, and secrets scanning in every pipeline, and making the results actionable for engineers instead of noisy.Introducing policy-as-code (e.g. Checkov, OPA) so infrastructure misconfigurations are caught before they're merged, not after they're deployed.Developing secure-by-default infrastructure modules that enable engineering teams to launch new, secure services with ease.Strengthening our cloud security posture across a multi-account AWS organization: identity management, threat detection, and vulnerability management as an ongoing program.Automating compliance: working with our Security Engineer and IT Manager to turn security controls into automatically collected, audit-ready evidence, and supporting security audits.Improving monitoring and observability using Grafana Cloud and OpenTelemetry, including security signals and alerting.Finding opportunities to automate repetitive processes and continuously improve the developer experience.This role offers plenty of ownership while giving you the opportunity to learn, grow, and help shape the platform that powers Lepaya's mission to transform workplace learning.What you'll bringMinimum 4 years of experience in a DevOps, Platform, Cloud, or Security Engineering role in a fast-paced start-up or scale-up environment.Hands-on experience working with AWS and Terraform.Familiarity with CI/CD pipelines using GitHub Actions or similar tools.Experience working with Docker and cloud native orchestration services.A solid understanding of cloud security fundamentals such as IAM, hardening, encryption, network security, and secrets managementHands-on experience with at least one area of security automation - vulnerability scanning, code security analysis (SAST/SCA), policy-as-code, or cloud security posture management - and the appetite to grow into the rest.Scripting skills in Bash or Python. Experience with TypeScript is a plus.Strong English communication skills.Nice to haveExperience with tech compliance (ISO 27001, SOC 2, GDPR).Exposure to DAST tooling (e.g. OWASP ZAP) or offensive security basics.Experience with software supply chain security.Exposure to GCP alongside AWS.Our tech stackCloud: AWS (primary, multi-account Organizations), GCPIaC: Terraform (tflint, terraform-docs, pre-commit), PackerCompute: ECS on Fargate, Lambda, ECRCI/CD: GitHub Actions with centralized reusable workflows, GitHub OIDC, self-hosted runners on AWS, DependabotSecurity: IAM Identity Center, GuardDuty, KMS, WAFv2, SSM Parameter Store, Trivy/Grype/Snyk, SonarQubeObservability: Grafana Cloud, Loki, OpenTelemetry, CloudWatch, Sentry, Slack alertingData & storage: Aurora/RDS PostgreSQL, DynamoDB, S3, Airflow (MWAA)AI & ML: Amazon SageMakerNetworking & edge: CloudFront, ALB, Route53, VPC, nginx, OpenVPN/SSM Session ManagerApplication stack: Node.js/TypeScript (NestJS, Fastify), Python (FastAPI), React, Vue, Flutter, SalesforceWhy you'll love this journey at LepayaA challenging role in a vibrant international scale-upOur work-to-live scheme, which prioritizes health and wellbeingUnlimited holidays and Lepaya Fridays, every other Friday, a day for yourselfFlexible hours and a hybrid working arrangement, we expect you to work from our office at least 3 days a week. Tuesday and Thursday are anchor daysWork from anywhere for 8 weeks/yearAccess to , our well-being partnerLots of opportunities to learn and grow, including internal career development:Access to our Lepaya Academy to help you upskillAn internal hiring program to help you advance
Linked-in
Google