DevSecOps Engineer – Payment Integrations

About the role

We are building a payment gateway that handles user‑to‑merchant and merchant‑to‑user fund flows while complying with PCI DSS. The team needs a DevSecOps Engineer to design, automate, and secure the cloud infrastructure that powers these integrations.

Key responsibilities

• Design, implement and manage AWS infrastructure with a focus on security controls and secure configuration.
• Automate cloud operations and ensure deployments follow security baselines.
• Develop CI/CD pipelines that embed automated security checks such as SCA and SAST.
• Implement monitoring, logging and alerting using CloudWatch, CloudTrail, AWS Security Hub and related tools.
• Conduct PCI DSS security assessments, vulnerability management and change management.
• Prepare for and actively participate in PCI DSS audits, providing evidence and controls.
• Collaborate with development, operations and security teams to foster shared security responsibility.
• Document security posture, audit readiness and operational metrics.

Required profile

• 3+ years of experience managing cloud infrastructure.
• Hands‑on experience with DevSecOps tools, CI/CD, containerization (Docker) and orchestration (Kubernetes).
• Solid understanding of AWS security best practices and PCI DSS requirements.

Required skills

• AWS services (WAF, Shield, GuardDuty, Security Hub, KMS, Secrets Manager, Inspector, etc.)
• Kubernetes, Docker, Helm
• Terraform, Terragrunt, OpenTofu
• GitLab CI/CD
• SAML, SSO, MFA
• ELK Stack, CloudWatch, CloudTrail
• Linkerd
• PCI DSS compliance knowledge