DevOps Engineer, Security

Role Overview

• Execute neoBIM’s DevOps strategy, combining strategic foresight with hands-on implementation.
• Embed DevSecOps principles into every stage of development — from secure code scanning and dependency management to vulnerability assessment and threat modeling.
• Oversee the end-to-end build and operation of neoBIM’s infrastructure: from Linux servers, containers and cloud environments to databases and monitoring.
• Design CI/CD pipelines, automate workflows with GitHub Actions and ensure the engineering team can deliver quickly and safely.
• Use Terraform to manage and evolve scalable cloud infrastructure.
• Implement monitoring, alerting and incident response to keep our services resilient.
• Work closely with engineering, product and leadership to align DevOps with business goals.

Requirements

• Solid understanding of Linux systems administration, shell scripting and performance tuning.
• Expertise in building, running and maintaining containerized applications.
• Hands-on experience with core AWS services (EC2, S3, RDS, IAM, Lambda, etc.) to design scalable infrastructures.
• Strong knowledge of PostgreSQL, including optimization, backup/restore and high availability setups.
• Experience deploying modern web applications via Vercel, including CI/CD integration.
• Advanced use of Infrastructure as Code to manage and scale cloud infrastructure reproducibly.
• Proven ability to set up and maintain repositories, branching strategies and automated workflows.
• Familiarity with tools such as Prometheus, Grafana or Datadog for metrics, alerting and observability.
• Experience in agile project tracking and integration with developer workflows.
• Deep understanding of Identity and Access Management, enforcing least-privilege principles and secure role-based access across AWS and CI/CD systems.
• Experience integrating automated code and container scans (e.g. Trivy, Snyk, Dependabot) and applying system hardening best practices.
• Ability to read and understand TypeScript code to better support developer teams (nice to have).
• Knowledge of implementing real-time communication channels between client and server (nice to have).
• Experience integrating infrastructure monitoring and automation alerts into Slack for team collaboration (nice to have).
• Hands-on use of tools like HashiCorp Vault, AWS Secrets Manager, or GitHub Encrypted Secrets for secure credentials handling (nice to have).

Tech Stack

• AWS
• Cloud
• EC2
• Grafana
• Linux
• Postgres
• Prometheus
• Shell Scripting
• Terraform
• TypeScript
• Vault

Benefits

• Attractive Compensation & Growth Path
• Strategic Ownership of High-Impact AI Initiatives
• Access to World-Class Infrastructure
• A Culture of Deep Tech and Real-World Application
• Flexibility with remote first work environment and a great team that shapes the future