DevSecOps Engineer

Ingemark

About The Position

Ingemark is hiring a DevSecOps Engineer to help shape the cloud foundation for a major international enterprise. The role shares ownership of multi-cloud architecture, governance, and landing zones across AWS, Azure, and GCP, and maintains enterprise tools including GitHub, Terraform Cloud, Datadog, PagerDuty, and AWX/Ansible. The focus is operational: keeping services running, secure, and well-automated, and handling incidents and requests during the employee’s hours as part of a follow-the-sun support model.

Requirements

At least 2 years of experience in cloud operations, DevOps, SRE, or a similar role.
Hands-on experience with at least one of AWS, Azure, or GCP.
Solid cloud fundamentals, including IAM, networking (VPC/VNet, DNS, firewalls, and security groups), compute, and storage.
Day-to-day experience with Terraform.
Experience with Git and GitHub, including pull requests and GitHub Actions.
Strong Linux/Unix knowledge, including administration, processes, file systems, networking, and permissions.
Scripting skills in Bash or Python.
Experience building, optimizing, and securing Docker container images.
Experience with monitoring and centralized logging tools, such as Datadog, Prometheus, Grafana, or ELK, to detect anomalies and incidents.
Experience handling incidents, including on-call work, triage, structured troubleshooting, and working through problems without a ready-made runbook.
Experience with ticket-based work using ServiceNow, Jira, or similar.
Fluent written and spoken English.

Nice To Haves

Experience with Datadog, including monitors, dashboards, and integrations, and PagerDuty administration.
Experience with Ansible, ideally AWX or Ansible Tower.
Terraform Cloud or Terraform Enterprise experience, including workspaces and policy as code (Sentinel/OPA).
Landing zone and governance experience: AWS Organizations, Control Tower, and SCPs; Azure Landing Zones and Azure Policy; or GCP organization policies.
A cloud certification, such as AWS SysOps Administrator or Solutions Architect Associate, Azure Administrator AZ-104, or GCP Associate Cloud Engineer.
Kubernetes experience with EKS, AKS, or GKE.
Familiarity with ITIL incident and change management.

Responsibilities

Respond to incidents and alerts on team-owned services as part of a PagerDuty on-call rotation.
Triage incoming requests from ServiceNow, PagerDuty, and Microsoft Teams, resolving them directly or routing them to the team’s Jira backlog.
Identify root causes of technical problems and implement fixes according to agreed team processes.
Handle day-to-day platform operations, including onboarding users and teams, managing access, making configuration changes, and troubleshooting pipelines and automation.
Help maintain cloud landing zones and guardrails, including policies, IAM, and network configuration, in line with client governance standards.
Make infrastructure changes as code using Terraform through Terraform Cloud and Ansible through AWX, via GitHub-based workflows.
Build and improve CI/CD pipelines and automation used to deliver and deploy changes, keeping them reliable and performant.
Review and test infrastructure code and configuration for security risks and act on findings.
Write and improve runbooks and documentation to support faster incident resolution.
Escalate issues to senior engineers when needed, providing a clear handover of checks performed and findings.
Contribute to project work when operational workload allows.