DevOps / DevSecOps Platform Engineer

Security, Identity & Key Management . Implement robust security protocols: DLP, IDS, Zero-Trust Architecture, and trusted computing principles. . Manage secrets and encryption keys (certificate/key vaults) across systems. . Administer Identity Management: Entra ID, SSO for secure access control. . Ensure end-to-end Key Management and secure authentication strategies. Compliance & Risk Management . Ensure full compliance with GDPR, ISAE 3000, SOC 2 Type 2, CIS benchmarks. . Enforce encryption standards (at rest & in transit) and maintain audit readiness. . Proactively mitigate risks using OWASP tools and cloud security best practices. Cloud Services, Scaling & Containerization . Design secure, scalable cloud architectures with Kubernetes (K3s, RKE, Exoscale) and Docker. . Run containerized apps efficiently and securely across environments. . Apply Infrastructure as Code (IaC) using Pulumi, Helm, ArgoCD, GitLab CI/CD. Platform & Network Architecture . Manage PostgreSQL, RabbitMQ, S3, Proxmox and NVIDIA GPU workloads on Linux . Set up service mesh (Istio) and distributed storage (Longhorn). . Design resilient network architecture: firewalls, proxies (Caddy, HAProxy), VPNs (Netbird, Nebula). Monitoring, Automation & Recovery . Monitor infrastructure with Grafana, Prometheus, Mimir, Loki, Tempo, and Alertmanager. . Automate with Python and Bash; deploy and test Django apps. . Develop disaster recovery plans and ensure business continuity. . Enable e2e testing and continuous delivery for secure operations.