DevOps Engineer

ABOUT REVELSI

REVELSI is a cybersecurity company structured on three main pillars - information security, infrastructure, and software development. Our top priority is safeguarding the fast-evolving global infrastructures and technologies. We integrate cybersecurity into infrastructure development and operational processes, alongside software development, to proactively stay at the leading edge of industry advancements.

REVELSI TEAM

We're looking for a skilled and motivated DevOps Engineer to join our dynamic team, driven by a Silicon Valley mindset. Our team thrives on a blend of focused work and casual camaraderie, where fun and collaboration are just as important as innovation.

As we grow, we need someone who can help embed security into the way we build, deploy, and operate systems - working closely with software engineers, infrastructure teams, and cybersecurity specialists. You’ll be hands-on with CI/CD, cloud and container platforms, automation, and security tooling, helping teams ship faster without compromising security.

YOUR IMPACT

As we grow, we need someone who can help embed security into the way we build, deploy, and operate systems - working closely with software engineers, infrastructure teams, and cybersecurity specialists. You’ll be hands-on with CI/CD, cloud and container platforms, automation, and security tooling, helping teams ship faster without compromising security.

YOUR DAY-TO-DAY

Secure CI/CD: Build and maintain secure CI/CD pipelines (shift-left security), integrate security checks, enforce quality gates, and reduce pipeline friction.

Security Automation: Automate repetitive security tasks (resource deployment, scanning, validation, reporting, policy enforcement) using scripts and tooling.

Infrastructure-as-Code (IaC): Support secure-by-default IaC practices; integrate IaC scanning and policy-as-code into delivery workflows.

Container Security: Improve container hardening, image scanning, runtime controls, and Kubernetes security posture (RBAC, network policies, secrets, admission controls).

K8S Administration: Operate K8S clusters end-to-end – upgrades, node pools, autoscaling, CNI/networking, private clusters, add-ons, backup/restore considerations, and perform day-2 troubleshooting.

K8S Security Hardening: Enforce RBAC, Pod Security Standards (Azure Policy, Kyverno, Gatekeeper) admission control, network policies, secure ingress/egress patterns, and secure service meshes (Istio).

Network Security by Design: Support secure patterns like private endpoints, VNet integration, restricted outbound, and controlled ingress, network security perimeters; partner with infra/networking teams on segmentation.

Monitoring & Response Readiness: Support security logging/monitoring integrations and help

improve alerting, visibility, and incident response workflows.

YOUR SKILLS AND KNOWLEDGE

- Bachelor’s degree in computer science, Information Security, or a related field (master’s preferred).

- 2+ years’ experience in DevOps/SRE/Platform Engineering and/or Security Engineering, with proven delivery in CI/CD environments.

- Azure-first cloud knowledge with strong focus on private networking, IAM, logging/monitoring, and encryption (AWS/GCP exposure is a plus), Logic Apps/Function Apps.

- Entra ID & Hybrid Identity (Entra + AD): tenants, app registrations, enterprise apps, service principals, federated credentials, managed identities, AD DS fundamentals, AAD Connect/Cloud Sync basics, group/role design, hybrid access patterns.

- Strong knowledge of authentication/authorization concepts and protocols: OAuth2, OIDC, SAML, JWT.

- Azure DevOps (ADO) CI/CD security: building and securing YAML pipelines, service connections,

approvals/gates, and Git-based workflows; ability to implement credential federation and secretless pipelines.

- Infrastructure as Code: Terraform (preferred) and/or Ansible; modules, state, environment separation; IaC security scanning (Snyk, Checkov, tfsec).

- Kubernetes/AKS production administration: CNI (Calico+Flannel), upgrades, node pools, autoscaling, cluster/network troubleshooting, namespaces, quotas/limits, ingress (MetalLB, Traefik),

network policies, workload identity.

- Scripting/automation: Python, Bash, PowerShell, Go (or similar) with an automation mindset.

- Git fluency: branching strategies, PR workflows, resolving conflicts, semantic versioning basics.

- Ability to define and roll out standards (“golden pipelines”, Terraform module standards, cluster

baseline controls); clear documentation/runbooks and internal enablement.

- Ownership mindset: drive remediation to closure, measurable improvements, continuous optimization.

- Nice to have: Security+, relevant Azure certs (AZ-400, AZ-104, AZ-500, SC-300), CKA/CKS, HCP

Terraform Associate.

WORK SCHEDULE

Monday to Friday: 12:00 – 21:00 (1 hour lunch break)

WE VALUE OUR EMPLOYEES

At REVELSI, we focus on ensuring you a benefit package that will take care of your health, wealth and well-being.

● Private Healthcare at Regina Maria

● Medical Assurance at Signal Iduna

● Private dental services

● Edenred meal tickets

● Referral Bonus

● Training and growth opportunities

● Team buildings

● Revel welcome pack (branded backpack agenda & pen)

● Pizza day at the office and free drinks

● Christmas/Easter gifts

● 21 days of PTO per year and additional days off based on your seniority in Revel (2 additional days will be added to your total number of days off after every 2 years in the company, until you reach a maximum of 25 days off)

Every day is an opportunity to grow and go beyond our limits! Our team believes in taking on challenges and conquering them together. It’s amazing to think what we can accomplish together!

Equal Opportunity Employment: REVELSI is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.