DevSecOps Engineer

Keep our platform running, secure and compliant. You’ll build and maintain our infrastructure along with the security controls that protect it. As part of our four-person DevSecOps team, you’ll own the technical side of compliance, working closely with our compliance lead to turn requirements into working systems. Our Stack We run and manage our own Kubernetes clusters on OVHCloud with GitOps: ArgoCD, Kargo. We use PostgreSQL, MariaDB and MongoDB databases. General tools used: GitHub, Google Workspace, Slack, Notion. Our services focus on health data presentation and secure exchange. Written in Java, Typescript, Rust, Go. Infrastructure as code: Kubernetes clusters, DNS, GitHub settings, VPN (NetBird), identity and access management, Grafana Cloud,. Networking and access: Envoy Gateway, Kyverno, Dex, and Hoop. Observability: OpenTelemetry, ClickStack, Grafana, and Vector. Host Security: CrowdStrike Falcon XDR. Secret Management: Vault, ESO, CertManager, SOPS. What you will do Security Together with the application teams, ensure applications, their dependencies, cluster components, and host machines are up-to-date and secure. Responsible for implementing and maintaining technical and procedural controls required by our various security frameworks (i.e. NEN 7510, ISO 27001, MedMij, DigiD, TSS-SFW) in close cooperation with our compliance lead. Oversee yearly external pen-tests. Make sure the issues found are resolved in a timely manner. Answer technical questions in DPIAs and customer security questionnaires, and join audits when necessary. DevOps Build, run, and improve our platform, utilising infrastructure as code, ArgoCD, Kargo, and Terraform. Set up and maintain monitoring for platform components. Test core platform functionalities such as backups and time synchronisation. Manage our networking configuration and certificates. Keep systems up to date and available. What you bring 3+ years of experience in an operations, Dev(sec)Ops. or SRE role. Hands-on experience with Kubernetes, Linux, Infrastructure as Code, and GitOps. You take security seriously and know what is at stake with health data. Good communication skills in English. It’s an advantage if you have: Proficiency in Dutch. Experience with ISO 27001, NEN 7510 or a similar security framework. Experience in healthcare or another regulated sector. Experience with security tooling, such as EDR, SIEM, WAF or vulnerability scanning. Experience with GitOps (for example, Argo CD), Orchestration (for example, Kargo). You like to organise: plan team sessions, keep the security backlog up to date, and track progress. Relevant certifications (for example, cloud, Kubernetes or security certifications). What’s in it for you? A competitive salary, based on education and previous experience, up to €6,000 a month. NS Business Card with commuting costs up to €300 being paid. 200 hours of holiday leave (1.0 FTE) and 8% holiday allowance. A company laptop Pension plan with 10% of your salary contributed every month (7% contribution from the company). Developmental options related to your career growth, such as internal training and the ability to take external training if desired (400€ budget annually).