Senior DevSecOps Engineer

Hello, let’s meet!

We are Xebia - a place where experts grow. For nearly two decades now, we've been developing digital solutions for clients from many industries and places across the globe. Among the brands we’ve worked with are UPS, McLaren, Aviva, Deloitte, and many, many more.

We're passionate about Cloud-based solutions. So much so, that we have a partnership with three of the largest Cloud providers in the business – Amazon Web Services (AWS), Microsoft Azure & Google Cloud Platform (GCP). We even became the first AWS Premier Consulting Partner in Poland.

Formerly we were known as PGS Software. In 2021, we joined Xebia Group – a family of interlinked companies driven by the desire to make a difference in the world of technology.

Xebia stands for innovation, talented team members, and technological excellence. Xebia means worldwide recognition, and thought leadership. This regularly provides us with the opportunity to work on global, innovative projects.

Our mission can be captured in one word: Authority. We want to be recognized as the authority in our field of expertise.

What makes us stand out? It's the little details, like our attitude, dedication to knowledge, and the belief in people's potential - emphasizing every team members development. Obviously, these things are not easy to present on paper – so make sure to visit us to see it with your own eyes!

Now, we've talked a lot about ourselves – but we'd love to hear more about you.

Send us your resume to start the conversation and join the #Xebia.

About the role

We are looking for an experienced DevSecOps Engineer to help build, secure, and automate our global AWS environment. This role bridges networking, automation, compliance, and security, ensuring that our multi-account AWS platform is fully secure, governed, and scalable.

As a DecSecOps Engineer, you will work on building guardrails, policy-as-code, automated pipelines, and global networking architectures, with hands-on responsibilities for ensuring security and compliance at every stage.

You will be:

• implementing centralized security and compliance guardrails across AWS accounts,

• automating infrastructure and network provisioning using Terraform and AWS Cloud WAN,

• desiging and enforcing Policy-as-Code (OPA / Rego) to prevent non-compliant configurations,

• building and maintain Account Factory for Terraform (AFT) and CI/CD pipelines for infrastructure,

• delivering secure, centralized egress architectures using AWS Network Firewall,

• monitoring and responding to security risks in multi-account AWS environments,

• collaborating with global teams operating in US (EST) hours.

Requirements

• hands-on experience in AWS, including:

  • AWS Cloud WAN

  • AWS Network Firewall

  • AWS Control Tower

• strong background in Terraform and infrastructure automation,

• proven experience with Policy-as-Code (OPA/Rego) and CI/CD pipelines,

• solid understanding of cloud security, governance, and compliance best practices,

• ability to work in US (EST) business hours,

• strong English communication skills.

Work from the European Union region and a work permit are required.

Nice to have:

• AWS certifications (Security, Advanced Networking, Solutions Architect),

• experience with enterprise-scale multi-account environments,

• knowledge of automated risk analysis or AI-driven compliance tools.

  
  

Recruitment Process:

CV review – HR Call – Interview I – Interview II – Decision