Infrastructure Engineer DevSecOps, Compliance & Cloud

Infrastructure Engineer DevSecOps, Compliance & Cloud

Reports To: Head of Infrastructure & CRA Practice Lead

Experience Level: 610 years

About Us

At Codvo, we are committed to building scalable, future-ready data platforms that power business impact. We believe in a culture of innovation, collaboration, and growth, where engineers can experiment, learn, and thrive. Join us to be part of a team that solves complex data challenges with creativity and cutting-edge technology.

About the Role

We are seeking an Infrastructure Engineer (DevSecOps & Compliance) to build and manage secure, compliant, and automated environments supporting CRA-aligned development and testing.This role focuses on designing infrastructure that embeds security, observability, and compliance automation across hybrid and multi-cloud environments (AWS, Azure, GCP, on-prem).Youll collaborate with software, security, and QA teams to implement continuous compliance, policy-as-code, and secure CI/CD practices.Key ResponsibilitiesDesign, deploy, and manage secure CI/CD pipelines for multi-platform software development.Implement infrastructure-as-code (IaC) using Terraform, Ansible, or Pulumi with compliance guardrails.Integrate security scanners (SAST, SCA, DAST, IaC) into pipelines for continuous compliance.Manage SBOM generation, artifact signing, and supply chain security automation.Monitor and harden cloud workloads, containers, and Kubernetes clusters against vulnerabilities.Establish observability frameworks (logging, monitoring, alerting) with compliance tagging.Collaborate with auditors to provide infrastructure evidence for CRA, ISO 27001, and SOC 2 certifications.Maintain compliance documentation (architecture, controls, and change logs).Required Skills & Experience6+ years of experience in Infrastructure, DevOps, or Cloud Engineering.Hands-on expertise with AWS/Azure/GCP, Docker/Kubernetes, and Terraform.Strong knowledge of CI/CD tools: Jenkins, GitHub Actions, GitLab CI, or Azure DevOps.Familiarity with security automation and DevSecOps toolchains (Checkov, Trivy, Aqua, Snyk, OPA).Experience implementing network and endpoint hardening, least-privilege IAM, and secret management.Understanding of compliance frameworks (CRA, NIS2, ISO 27001, SOC 2).Excellent scripting ability (Python, Bash, PowerShell, or Go).Preferred QualificationsBachelors or Masters in Computer Science, Information Security, or related field.Certifications: AWS Security Specialty, Terraform Associate, CISSP, or CISA.Experience with zero trust, SBOM automation, or policy-as-code environments.Prior exposure to industrial or edge computing systems.Why Join UsJoin a team defining how compliant cloud infrastructure is built and operated. Youll help global engineering teams achieve secure-by-design infrastructure through automation, resilience, and continuous compliance. .