DevSecOps / Infrastructure Lead

About The Client

Our client is an international fintech company specializing in high-volume payment processing and transaction management. The company develops and maintains a complex infrastructure that supports wire transfers, crypto exchange operations, and automated financial workflows. With a strong focus on scalability, reliability, and security, the organization is expanding its technical operations across Europe and Asia to support growing product and compliance demands.

Role Overview

In this role, you’ll own the full lifecycle of infrastructure and security operations across multiple fintech products — from cloud architecture and CI/CD pipelines to compliance and disaster recovery. You’ll ensure the environment meets strict PCI DSS, DR/BCP, and audit readiness requirements while collaborating closely with development and security teams to deliver robust, production-grade systems.

Key Responsibilities

Design, document, and implement secure multi-zone cloud architecture (PCI, Crypto, CoreBanking, BackOffice, NonProd).
Build and maintain IaC modules (Terraform + GitOps) ensuring reproducible, policy-compliant environments.
Manage secrets and keys using Vault + HSM/CloudHSM; enforce RBAC, MFA, and SOD principles.
Configure monitoring and observability (Prometheus, Grafana, SIEM, EDR) with incident runbooks and metrics.
Lead DR/BCP testing ensuring RTO ≤1h, RPO ≤15m, and complete recovery validation.
Establish and secure CI/CD pipelines (signed images, approvals, rollback, SBOM, canary deployments).
Prepare audit evidence packs including access logs, policy enforcement, and immutable change records.

Requirements

5+ years of experience in DevOps, Infrastructure, or DevSecOps roles within fintech, crypto, or banking.
Hands-on expertise with AWS/Azure/GCP, Kubernetes (hardened clusters), Terraform, and GitOps.
Strong background in infrastructure security, PCI DSS compliance, and audit preparation.
Experience with SIEM, monitoring, and runtime protection tools (Prometheus, Grafana, Wazuh, Falco, etc.).
Proficiency in CI/CD, IaC, identity management (IdP, MFA, PAM), and key management (Vault, HSM).

Key Soft Skills