Lead DevSecOps Engineer

Playson is a leading iGaming supplier seeking a Lead DevSecOps Engineer to build and lead a Platform & Cloud Security function. The role involves establishing best practices, integrating security into CI/CD pipelines, hardening infrastructure, and automating security workflows. Playson is focused on latency reduction and player experience, and will be a key player in cloud security.

Requirements

• 5+ years in Security Engineering / DevSecOps
• Strong skills in Python and Bash
• Deep knowledge of IAM least-privilege design, encryption at rest/in transit, GuardDuty, Security Hub, and best practices for securing multi-account environments.
• Implementation of security controls in pipelines (SAST, DAST, dependency scanning, container image scanning, policy-as-code).
• Hardening of Linux systems, Docker, Kubernetes/EKS; strong experience with RBAC, PodSecurity/OPA/Gatekeeper/Kyverno policies.
• Terraform/Terragrunt, including policy-as-code, drift detection, and compliance enforcement.
• Expertise with HashiCorp Vault, AWS Secrets Manager, or equivalent.
• Hands-on with centralized logging, SIEM/SOAR tools (Datadog Security, ELK, CloudWatch, etc.) and incident response workflows.
• In-depth understanding of secure network design, segmentation, and monitoring.
• Experience with tools enabling temporary, approval-based access (Teleport, AWS IAM Identity Center, Okta, etc.)
• Familiarity with SBOM generation (CycloneDX, Syft), artifact signing (Cosign, Sigstore), and applying SLSA/in-toto frameworks.
• Understanding of ISO 27001, GDPR, PCI-DSS (iGaming relevance), plus experience automating compliance checks with IaC and policy engines.

Benefits

• Compensation at top industry standards
• Quarterly bonuses based on transparent evaluation
• Remote-first flexibility
• Comprehensive medical insurance
• Financial support for major life events
• Professional growth budget
• Recruitment Process