Senior DevSecOps Engineer

Join BUX, a modern fintech company based in Amsterdam, as a Senior DevSecOps Engineer. In this role, you will shape the cloud technical direction, drive DevSecOps excellence, and mentor DevOps engineers. You will work closely with Security Engineering colleagues and have the freedom to brainstorm and execute new ideas. This is an opportunity to stretch your skills, contribute to something real, and grow alongside a talented team.

Definir y dirigir la visión técnica para la infraestructura en la nube de BUX, estableciendo estándares arquitectónicos para soluciones nativas de la nube en Google Cloud Platform.

Responsibilities

• Liderar iniciativas de "Infraestructura como Código" utilizando Terraform y evolucionar las plataformas de Kubernetes para cargas de trabajo de producción a escala.
• Tomar la propiedad de proyectos de infraestructura críticos, incluyendo sistemas de mensajería (Kafka, RabbitMQ), infraestructura de bases de datos (Cassandra, CloudSQL) y soluciones de observabilidad.
• Hands-on security engineering inside the delivery process, with real depth in several of: IAM and least-privilege design at scale, secrets management, pipeline security gating with genuine triage, policy-as-code, supply-chain signing and provenance, Kubernetes hardening, cloud network security. We do not expect all of these. We do expect several of them to be things you have built and operated, not evaluated
• Track record of driving organisation-wide improvements and strategic initiatives
• Solid experience with monitoring, observability, and incident management at scale
• Strong collaboration and communication skills across all organisational levels, including with the people whose job is to challenge your design
• You regularly use GenAI tools, stay up to date with new ones, and encourage the team to use them to speed up delivery and improve how everyone works
• Deep understanding of CI/CD pipelines, DevOps best practices, and DevSecOps
• Key and crypto management on a cloud KMS, including rotation and separation of duties
• Policy-as-code tooling (OPA, Conftest, Gatekeeper or equivalent) and cloud security posture management

Requirements

• Senior Technical Leadership level experience with proven ability to take ownership of projects from start to end
• Experience with at least two of Kafka, CloudSQL (PostgreSQL & MySQL), and GitHub Actions

Excellent command of 'Infrastructure as Code' using Terraform

• Proficiency in Python development and advanced scripting capabilities (Bash)
• Experience working somewhere controls have to be evidenced rather than asserted, and the patience that goes with it
• A keen eye for detail while always keeping the big picture in mind
• Expert knowledge of Google Cloud Platform (GCP) with focus on Kubernetes and container orchestration
• Practical experience of DORA, ISO 27001 or a comparable regime, ideally from the engineering side rather than the documentation side
• Supply-chain security in practice: SBOM formats, cosign or Sigstore, SLSA-style provenance

Threat modelling alongside product teams

• Experience with serverless cloud technologies like Cloud Run and Cloud Functions
• Ability to understand and work with Java/Kotlin code in Spring Boot applications
• Experience with RabbitMQ and Cassandra
• Working experience with Google PubSub and VertexAI
• Understanding of financial services and neobroker business models
• Certifications such as CKS or Google Professional Cloud Security Engineer, which we read as a signal rather than a requirement