Senior DevSecOps Engineer

Company NestAI is a European AI lab for defence delivering the adaptive operating system for modern battlefield operations. We develop adaptive intelligence for unmanned and command systems: AI that continuously learns from operational data and adapts to changing conditions. NestOS is our open, modular, and interoperable platform that enables this at scale and keeps capability evolution under sovereign European control. Founded in 2025 by Peter Sarlin, whose previous company Silo AI became Europe's largest AI acquisition, NestAI brings together over 150 engineers and scientists and partners with leading European defence forces and industry. Role Description We are looking for a (Senior) DevSecOps Engineer to strengthen our Core Engineering team. In this role, you will focus on building, automating, and securing the foundation of our NestOS platform. You will ensure that our deployment pipelines, container orchestration, and cloud infrastructure maintain the highest security standards without sacrificing delivery velocity. We are looking for a proactive, self-driven problem solver with an infrastructure-first mindset who naturally integrates security practices into daily engineering operations. Your work directly enables secure deployments across cloud, hybrid, and sovereign on-premise environments. Day-to-day responsibilities include: Design, build, and maintain scalable cloud environments (AWS, Azure, or GCP) using Terraform and modern IaC practices.Implement automated security testing (SAST, DAST, SCA, IaC scanning) and robust GitOps workflows directly into CI/CD pipelines.Manage, secure, and optimize containerized workloads operating on Kubernetes using Helm, Kustomize, and ArgoCD or Flux.Own secrets management, IAM, and OIDC configurations to enforce strict zero-trust access controls across development and production environments.Operate between development and security teams, advocating for security best practices without creating engineering friction. Qualifications Hands-on experience with cloud platforms (AWS/Azure/GCP), IaC (Terraform), Docker, Kubernetes, and GitOps delivery (ArgoCD/Flux, Helm, Kustomize).Proven track record designing CI/CD pipelines (GitHub Actions, GitLab CI, Azure DevOps, Jenkins) with integrated security tooling (SAST, DAST, SCA, IaC scanning).Solid foundation in secrets management, IAM, OIDC, and experience working with at least one compliance framework (SOC 2, ISO 27001, PCI-DSS, or HIPAA).Proficient in Python, Go, or Bash, with a proactive, shift-left mindset and strong communication skills to bridge developer velocity and strict security.Experience with air-gapped, hybrid/on-premise, or multi-tenant deployments and software supply chain security (SBOM, Cosign, SLSA/SSDF).Professional working proficiency in English. Strong Finnish language skills are considered as an advantage.Familiarity with defence/regulatory security standards (STIG, CIS, NIS2), policy-as-code (OPA/Gatekeeper), or Keycloak/identity administration is considered as an advantage. Why join NestAI At NestAI, you’ll build meaningful, real-world technology as part of a world-class team of engineers, scientists, and experienced professionals. You’ll work on systems where reliability genuinely matters, contribute to Europe’s security and resilience, and solve problems that demand depth, trust, and craftsmanship. If you want to build with purpose — and with leading experts in the field — you’ve come to the right place. Perks & Benefits We offer a growing set of practical benefits to support your work and wellbeing, day to day: Occupational healthcare (currently provided by Mehiläinen)Epassi Flex benefit (sports, culture, commuting, wellbeing)Lunch benefit (25% tax-free coverage)Auntie (mental wellbeing services)Regular team lunches and all-hands eventsYour choice of Mac or PCHoliday allowance (50% of holiday salary)Phone benefit according to company policy (subscription and device) Practicalities Employment is subject to applicable security screening (including SUPO, where required). NestAI is an equal opportunity employer. We consider all applicants based on their skills, experience, and potential. We are currently unable to provide visa sponsorship or international relocation support for this position. Candidates must already be based in Finland or in the EU and have a valid work permit for this region at the time of application.