DevSecOps Engineer

About the role

As a DevSecOps Engineer at Holafly, you will design and operate the core cloud infrastructure that powers secure eSIM connectivity for millions of travellers. You will embed security into every layer of the platform, enabling engineering teams to deliver reliable, scalable services.

Key responsibilities

• Design, build, and maintain the Google Cloud Platform (GCP) foundation, including GKE clusters and networking.
• Automate infrastructure provisioning and configuration using Terraform and Ansible.
• Implement least‑privilege IAM policies, image scanning, and SOPS‑based secret management.
• Optimize CI/CD pipelines with Cloud Build and GitHub for secure code delivery.
• Enhance observability and incident response using OpenTelemetry and OpenSearch.
• Support platform reliability through monitoring, alerting, and 24/7 incident handling.

Required profile

• Proven experience managing GCP and Kubernetes (GKE) at scale.
• Strong background in Infrastructure as Code, especially Terraform.
• Hands‑on scripting skills in Python or Bash for automation.
• Security‑first mindset with experience in secret management and supply‑chain hygiene.

Required skills

• Google Cloud Platform (GCP)
• Kubernetes / GKE
• Terraform
• Ansible
• Python
• Bash
• Docker & container security
• Image vulnerability scanning
• SOPS secret management
• CI/CD (Cloud Build, GitHub)
• OpenTelemetry
• OpenSearch

What we offer

• Hybrid work model (3 days onsite during Phase 1, 1 day onsite thereafter)
• 25 days PTO
• 5% pension contribution
• €3000 medical/health coverage
• $500 self‑development budget