DevSecOps Engineer – Cloud Security & Compliance

About the role

As a member of the Cloud Operations organization, you will join the DevSecOps & Cloud Compliance team supporting Kyriba’s SaaS platform. You will bridge global cyber‑security policies with cloud infrastructure, ensuring Zero‑Trust architecture, automated guardrails, network security, and regulatory compliance are embedded in engineering workflows without slowing deployment velocity.

Key responsibilities

• Own day‑to‑day infrastructure support and operations of the Kyriba SaaS platform (24x7x365 across multiple locations).
• Create internal automation, monitoring, deployment and testing tools.
• Continuously improve processes, methodologies, technologies and practices.
• Collaborate effectively with team members across multiple geographies.
• Orchestrate and deploy virtualized infrastructure and services in a public cloud using Infrastructure‑as‑Code.
• Implement and maintain certificate lifecycle management and automation.
• Maintain cloud security posture, including IAM, network security and compliance guardrails.
• Manage global DNS infrastructure.
• Support regulatory compliance (SOC 1 & 2, ISO 27001, SWIFT, etc.).
• Automate and maintain documentation, evidence and security controls required for compliance certifications.

Required profile

• Degree in Computer Science, Cybersecurity, Software Engineering or a related discipline.
• 3+ years of experience on a DevSecOps, Cloud Security or Systems Engineering team.
• Hands‑on experience with AWS, Azure or GCP, focusing on IAM, networking, security boundaries and managed services.
• Strong background in network security, DNS, firewalls and SSL/TLS certificate lifecycle automation.
• Experience with Infrastructure‑as‑Code (Terraform, CloudFormation) and Policy‑as‑Code paradigms.
• Experience implementing technical controls for regulatory frameworks such as SOC 1 & 2, ISO 27001 and SWIFT.
• Familiarity with CI/CD pipeline automation and integration of security tools (SAST, DAST, SCA).
• Ability to work effectively across multiple geographies and time zones.
• Excellent verbal and written communication skills in English.

Required skills

• AWS
• Azure
• Google Cloud Platform (GCP)
• Terraform
• CloudFormation
• IAM
• DNS
• Firewalls
• SSL/TLS
• CI/CD
• SAST
• DAST
• SCA