Senior DevSecOps Engineer — Hybrid & Secure Cloud CI/CD

Leaf Space is seeking a DevSecOps Engineer to design, implement, and continually improve CI/CD, cloud, and infrastructure, while embedding security across development, operations, and embedded software tooling. This hands-on role spans delivery, security, and compliance for mission-critical systems.

You will work with Linux, containerized workloads, IaC, and observability to ensure secure, scalable ground-segment services in a hybrid, international context.

Design, build, and maintain CI/CD pipelines for ground-segment, network, and embedded software, with automated testing, security scanning, and controlled release gates.
Contribute to automation tooling and software development supporting the platform and infrastructure.
Collaborate with embedded software teams to support build toolchains, cross‑compilation and integration workflows.
Manage cloud and on‑prem infrastructure as code (Terraform, Ansible, or equivalent) with reproducible, auditable deployments.
Operate and secure containerized and orchestrated workloads (Docker, Kubernetes), including image hardening, registry scanning, and runtime security.
Implement observability — logging, metrics, tracing, and alerting — for reliable, debuggable production systems.
Harden systems and enforce access control, network segmentation, and least‑privilege principles across environments.
Support compliance and audit readiness against frameworks relevant to critical infrastructure (e.g., NIS2, ISO 27001), contributing to policies, controls, and evidence.
Contribute to incident response, patch management, and secure configuration baselines.
Partner with software, network, and mission teams

Degree in computer science, engineering, or equivalent practical experience.
3–6 years in DevOps, SRE, platform, security, or software engineering roles.

Welfare platform
Meal vouchers
Hybrid work policy
Training opportunities