devops инженер in regulated finance

No description

• Design and implement infrastructure and cloud security controls in a multi-cloud, multi-entity environment;
• Configure alerting and automate evidence collection;
• Lead the technical response to security incidents end to end;
• Write Terraform, detection rules, and runbooks;
• Serve as the technical escalation point for security incidents.

• 6+ Years of experience in infrastructure, cloud, or security, including 3+ years focused on security in a regulated financial sector such as brokerage, trading, payments, banking, or crypto;
• Hands-on production experience with AWS and Azure, including IAM/RBAC, networking, KMS/Key Vault, logging, landing zones, and policy enforcement; experience designing infrastructure, not only auditing it;
• Active Directory experience with tiering, GPO, Conditional Access, hybrid identity, attack vectors and mitigations, IAM/PAM design, and access rights management;
• Experience building and configuring SIEM/EDR detections, owning alert quality, handling incidents end to end, and understanding SOC operations and SOC 2;
• Experience with Terraform/IaC, CI/CD security gates, Kubernetes and container security, and policy-as-code;
• Confident Python, Bash, and PowerShell skills;
• Comfortable working under pressure, including change freezes, regulatory deadlines, audits, and active incidents;
• Fluent Russian;
• Nice to have: HSM/MPC signing, hot/cold segregation, transaction flow monitoring.

• Office in Cyprus, with a minimum of 3 days per week on-site;
• Long-term ownership role, not a project role.