DevSecOps Engineer

Revizto enables the people behind the world’s most important structures to do their best work. We connect architects, engineers, contractors, and owners in one shared 2D/3D environment to help deliver complex projects on time and on budget. From airports and hospitals to data centers and large-scale infrastructure, Revizto supports industry leaders in reducing risk, improving collaboration, and delivering better project outcomes. Built on a gaming engine, Revizto is designed to handle the scale and complexity of modern construction projects while remaining fast, reliable, and accessible across devices and environments — whether teams are in the office or on site.Key Responsibilities & Requirements Infrastructure Security & ComplianceAs a cornerstone of this role, you will ensure our cloud foundations are resilient and compliantby design. Design and implement secure cloud infrastructure using Terraform/Terragrunt, following security best practices and CIS benchmark compliance Build vulnerability management workflows: scanning, triage, and remediation across cloud and endpoint estate Deploy and tune log-aggregation/detection infrastructure for automated incident response Design network segmentation for containerized and cloud-native environments. Expert-level experience with Terraform/Terragrunt across multi-account, multi-region environments (5+ years preferred)Kubernetes & Container Security You will lead the hardening of our servers, containerized environments and orchestrate secure runtime policies. Design secure Kubernetes cluster bootstrapping, node hardening, and control-plane configuration Implement Pod Security Standards, network policies, and RBAC via IaC Establish golden-image programs and container vulnerability scanning/policy enforcement for image registries Maintain hands-on experience with container runtime security and registry-integrated scanning CI/CD & Source Code Security In this capacity, you will integrate security directly into the developer experience and supply chain. Design secure CI/CD pipeline infrastructure with SAST/DAST integration and security gates Implement organization-wide GitHub security policies: branch protection, secret scanning, and dependency management Apply knowledge of supply-chain security controls and automated security testing frameworks Secrets, Identity & Endpoint Hardening Manage critical identity infrastructure and enforce rigorous hardening standards across all endpoints Implement secrets management infrastructure (e.g., HashiCorp Vault) for application and infrastructure credentials Design IAM across cloud environments and support Zero Trust initiatives Harden databases (MySQL, PostgreSQL, Redis) against encryption and access-control best practices Build backup/DR infrastructure with robust encryption and security controls Core Skills Technical mastery and a proactive troubleshooting mindset are essential for success in this role. Proficiency in security automation scripting (Python, Go, or Bash) Experience in threat modeling and security architecture review Comfortable owning infrastructure troubleshooting through to incident response Preferred Qualifications The ideal candidate brings advanced certifications and experience with specialized security tooling. Security certifications such as AWS Security Specialty, CISSP, CCSP, or Azure Security Engineer Experience with container security platforms (e.g., Falco, OPA Gatekeeper, Prisma Cloud) and service mesh security (Istio/Linkerd) Familiarity with SOAR/security automation platforms and infrastructure penetration testing Familiarity with GitOps and secure software supply-chain methodologies Position Overview DevSecOps Engineer responsible for security-first infrastructure architecture, threat detection, and compliance across our multi-cloud environment, with primary emphasis on AWS. Alibaba Cloud and GCP are expansion targets — current Terraform/Terragrunt modules and CIS benchmark tooling are AWS-only; this role will help build out equivalent coverage for the other platforms. Owns secure IaC delivery, Kubernetes/container security, and CI/CD supply-chain security.Why Join Us Recognised as one of Switzerland’s Best Managed Companies by Deloitte for three consecutive years from 2024 through Company-wide trips, including Armenia in 2023 and Switzerland in 2025, with more to come A flexible, employee-focused culture An innovative and collaborative team environment Great working conditions designed to support your best work We can only accept applications from candidates based in Germany, France or the UK.Originally posted on Himalayas