Senior DevSecOps

Svitla Systems Inc. is looking for a Senior DevSecOps for a full-time position (40 hours per week) in Ukraine. Our client is a Canadian courier and package delivery company. The company delivers nearly 500,000 parcels daily across Canada thanks to a technological platform offering more than 3500 optimized routes to almost 500 independent delivery employees. The company's services are provided via a digital order tracking platform that lets suppliers and logistics service dealers accept bulk orders, track parcel delivery routes, check and communicate shipment details, manage bills and invoices, and fasten the cargo shipment processes by partnering with certified transporters, enabling clients to request and enjoy secured transportation of their parcels and cargos by being able to track them in real-time. The client’s customers include Amazon, Pitney Bowes, and Landmark Global, which handle shipping for Etsy and eBay.

You will lead and mature our cloud security practices across AWS and Azure environments. This role is pivotal in embedding security into the development lifecycle, driving sustainable vulnerability remediation, and influencing architectural decisions for both new and legacy systems. You will partner with development teams, cloud architects, and the cybersecurity organization to ensure robust security posture, monitor compliance, and champion Infrastructure as Code (IaC) best practices.

Requirements

• 10+ years of experience in IT, with 5+ years in cloud security and DevSecOps roles.
• Deep expertise in AWS and Azure security services and architectures.
• Experience in security automation, scripting with Python and Bash, and cloud-native security tooling.
• Proven track record of leading security initiatives in large-scale, multi-cloud environments.
• Advanced proficiency in IaC tools (Terraform, CloudFormation, ARM templates).
• Hands-on experience with Datadog, Wiz, and vulnerability management platforms.
• Strong knowledge of CI/CD security integration, container security (Docker, Kubernetes), and policy-as-code.
• Familiarity with compliance frameworks (SOC 2) and risk management methodologies.
• Exceptional communication and leadership skills for influencing technical and business stakeholders.
  
  

Nice to have

• Certifications: AWS Certified Security – Specialty, Azure Security Engineer, GIAC Cloud Security Automation, Kubernetes Security Specialist, or equivalent.
  
  

Responsibilities

• Define and implement advanced security strategies for multi-cloud environments (AWS, Azure).
• Drive security automation and continuous compliance across CI/CD pipelines.
• Influence architecture and design decisions to align with Zero Trust and cloud-native security principles.
• Lead vulnerability identification, prioritization, and remediation efforts across diverse projects and workloads.
• Collaborate with Development, Cybersecurity, and Tech Architecture teams to ensure sustainable fixes and long-term risk reduction.
• Establish governance frameworks for secure development and deployment practices.
• Own security posture monitoring using Datadog, Wiz, and native cloud tools.
• Track and improve organizational security scores, compliance benchmarks, and risk indicators.
• Collaborate with Cybersecurity to implement monitoring strategies for the detection of anomalies and policy violations.
• Provide executive-level reporting and actionable insights for leadership.
• Champion secure IaC practices (Terraform) with DevOps and SRE teams.
• Integrate automated security checks into build pipelines and enforce policy-as-code.
• Mentor teams on secure coding, container security, and cloud security best practices.
• Act as a trusted advisor to development, operations, and security stakeholders.
• Drive cultural adoption of security-first principles across engineering teams.
• Contribute to incident response planning and post-mortem analysis for security events.
  
  

WE OFFER

• US and EU projects based on advanced technologies.
• Competitive compensation based on skills and experience.
• Regular performance appraisals to support your growth.
• Flexibility in workspace, either remote or in one of our development offices.
• Comprehensive medical insurance, including dental and massages.
• Personalized learning program tailored to your interests and skill development.
• Sport reimbursement program for onsite and online activities.
• Bonuses for recommendations of new employees.
• Bonuses for article writing, public talks, and other activities.
• 20 vacation days, 10 national holidays and 5 sick leaves.
• Maternity leave policy and family days off.
• Free tech webinars and meetups organized by Svitla.
• Welcome and anniversary presents, gifts for children, and more.
• Regular corporate events and meetups.
• Awesome team, friendly and supportive community!