DevSecOps Engineer

Company Description

BCB Medical is a specialized health IT provider that focuses on gathering and analyzing clinical data to revolutionize the impact on people's lives. Established in 2003, we offer world-class clinical management systems, an integration platform, BCB analytics service, and MyHealth service for healthcare organizations and patients.

Role Description

This role offers a unique opportunity to work across the entire infrastructure stack, gaining hands-on experience with both on-premises systems and modern cloud technologies. You’ll play a key role in securing patient data, optimizing system performance, and driving automation—all while contributing to a platform that truly impacts lives. If you’re excited to combine traditional sysadmin tasks with cutting-edge DevOps practices, this is the role for you. This is a full-time, permanent position based in our Turku or Espoo office. While we offer flexible remote work options, we’d love to see you in the office occasionally. 

Your Responsibilities Will Include:

• Manage and automate both on-premises and cloud infrastructure.
• Handle classic sysadmin tasks, including networking, virtualization, and server maintenance.
• Design and implement security best practices, ensuring systems are compliant with regulatory requirements.
• Create and maintain detailed, auditable documentation for security, infrastructure, and processes.
• Collaborate with development teams to streamline CI/CD pipelines and deployment strategies.
• Monitor system performance and proactively resolve issues to ensure maximum uptime.

To Succeed in This Role, You Should Have:

• 5+ years of experience in DevOps or cloud engineering, preferably in highly regulated environments. 
• Hands-on experience with on-prem infrastructure, including virtualization, storage, and networking.
• Proficiency in cloud platforms and infrastructure-as-code tools, particularly Azure (e.g., Terraform, Ansible, Kubernetes).
• Eagerness to support development teams in deploying and maintaining their software.
• Strong knowledge of security standards, threat modelling, and compliance in regulated environments (e.g., healthcare, finance).
• Ability to document systems and processes thoroughly for audits and security reviews.
• A mindset that values both stability and innovation, balancing legacy systems with modern automation solutions.
• Excellent problem-solving skills and a collaborative approach.
• Fluent in English, both written and spoken.