DevSecOps Engineer @ formelio

Keep our platform running, secure and compliant. You’ll build and maintain our infrastructure along with the security controls that protect it. As part of our four-person DevSecOps team, you’ll own the technical side of compliance, working closely with our compliance lead to turn requirements into working systems.

• Our Stack We run and manage our own Kubernetes clusters on OVHCloud with GitOps: ArgoCD, Kargo.
• We use PostgreSQL, MariaDB and MongoDB databases.
• General tools used: GitHub, Google Workspace, Slack, Notion.
• Our services focus on health data presentation and secure exchange.
• Written in Java, Typescript, Rust, Go.
• Infrastructure as code: Kubernetes clusters, DNS, GitHub settings, VPN (NetBird), identity and access management, Grafana Cloud,.
• Networking and access: Envoy Gateway, Kyverno, Dex, and Hoop.
• Observability: OpenTelemetry, ClickStack, Grafana, and Vector.
• Host Security: CrowdStrike Falcon XDR.
• Secret Management: Vault, ESO, CertManager, SOPS.

What you will do

• Security Together with the application teams, ensure applications, their dependencies, cluster components, and host machines are up-to-date and secure.
• Responsible for implementing and maintaining technical and procedural controls required by our various security frameworks (i.e. NEN 7510, ISO 27001, MedMij, DigiD , TSS-SFW) in close cooperation with our compliance lead.
• Oversee yearly external pen-tests.
• Make sure the issues found are resolved in a timely manner.
• Answer technical questions in DPIAs and customer security questionnaires, and join audits when necessary.
• DevOps Build, run, and improve our platform, utilising infrastructure as code, ArgoCD, Kargo, and Terraform.
• Set up and maintain monitoring for platform components.
• Test core platform functionalities such as backups and time synchronisation.
• Manage our networking configuration and certificates.
• Keep systems up to date and available.
• What you bring 3+ years of experience in an operations, Dev(sec)Ops. or SRE role.
• Hands-on experience with Kubernetes, Linux, Infrastructure as Code, and GitOps.
• You take security seriously and know what is at stake with health data.
• Good communication skills in English.
• It’s an advantage if you have: Proficiency in Dutch.
• Experience with ISO 27001, NEN 7510 or a similar security framework.
• Experience in healthcare or another regulated sector.
• Experience with security tooling, such as EDR, SIEM, WAF or vulnerability scanning.
• Experience with GitOps (for example, Argo CD), Orchestration (for example, Kargo).
• You like to organise: plan team sessions, keep the security backlog up to date, and track progress.
• Relevant certifications (for example, cloud, Kubernetes or security certifications).

What’s in it for you?

• A competitive salary, based on education and previous experience, up to €6,000 a month.
• NS Business Card with commuting costs up to €300 being paid.
• 200 hours of holiday leave (1.0 FTE) and 8% holiday allowance.
• A company laptop Pension plan with 10% of your salary contributed every month (7% contribution from the company).
• Developmental options related to your career growth, such as internal training and the ability to take external training if desired (400€ budget annually).