
Posted 19 hours ago
Senior DevOps/DevSecOps Engineer
ExpressVPNSenior DevOps/DevSecOps Engineer
Requirements
6–8 years DevOps/DevSecOps/SRE experience, Strong AWS knowledge (VPC, IAM, EKS, ECS, Lambda), Production experience with OpenTofu or Terraform, Hands-on Kubernetes/EKS experience, CI/CD experience with GitHub Actions, Proficiency in Python, Bachelor's degree in Computer Science or equivalent
Skills
AWSKubernetesTerraformPythonGitHub ActionsEKS
About the role
Responsibilities
- Design, build, and maintain AWS infrastructure across multiple accounts and regions using OpenTofu/Terraform.
- Operate and improve Amazon EKS fleets, including node lifecycle, HPA tuning, networking, and capacity planning.
- Build and maintain CI/CD pipelines in GitHub Actions for Docker, ECS, and Helm deployments.
- Manage and improve the observability stack using Grafana, Prometheus, Loki, and Tempo.
- Own and extend the zero-trust access model using Pomerium and Okta-driven AWS SSO.
- Harden identity and access posture through IAM role design, secret rotation, and OPA policies.
- Develop Python tooling to automate release pipelines, deployment workflows, and AWS housekeeping.
- Partner with product engineering teams to integrate new services into the platform.
- Mentor junior engineers and lead by example on operational rigor and DevSecOps best practices.
Requirements
- 6–8 years of hands-on experience in DevOps, DevSecOps, SRE, or Platform Engineering.
- Strong working knowledge of AWS (VPC, IAM, ECS Fargate, EKS, Lambda, S3, etc.) in multi-account environments.
- Production experience with OpenTofu or Terraform at scale, including module development.
- Hands-on Kubernetes/EKS experience running production workloads and debugging cluster issues.
- Strong CI/CD experience, specifically with GitHub Actions and reusable workflows.
- Proficiency in Python as a primary scripting language.
- Solid understanding of observability principles (metrics, logs, traces) and SLO-driven services.
- Bachelor's degree in Computer Science, Engineering, or equivalent practical experience.
Preferred Qualifications
- Experience with Pomerium, OAuth/OIDC, or other zero-trust access proxies.
- Experience with Helm chart authoring and release flows.
- Experience with Grafana OnCall, alerting design, and incident response.
- Experience operating identity systems at scale (Keycloak, Okta, etc.).
- Bare-metal or on-prem operational experience.
About the Company
ExpressVPN is one of the world’s leading providers of online privacy and security services. With millions of active paying customers and a global team, we provide industry-leading protection to hundreds of millions of people across the globe.
ScoutJobs Agent
Get matches like this delivered daily
Sign up free — we'll pull jobs that fit your CV from across the web and rank them for you.
Get started — it's freeSenior DevOps/DevSecOps Engineer
ExpressVPN · Singapore
