• Провести аудит та інвентаризацію поточної інфраструктури • Вести та реалізовувати backlog security/reliability покращень • Впорядкувати доступи та secrets management: least privilege, MFA/SSO, rotation, service accounts, secret storage/scanning • Підсилити security baseline інфраструктури • Побудувати якісний monitoring та observability • Підтримувати стабільність production-інфраструктури • Зробити CI/CD більш контрольованим та передбачуваним • Стандартизувати інфраструктурні зміни через IaC/config-driven підхід, review процеси та drift control • Поступово оновлювати legacy-інфраструктуру без ризику для бізнесу: risk assessment, migration planning, rollback/mitigation • Працювати в партнерстві з development-командами • Планувати інфраструктурний roadmap разом з HoE/Product

Role Description OffSec is seeking an experienced DevOps Engineer to join our team and lead the design and implementation of complex, scalable lab environments that power our industry-leading cybersecurity training and certification programs. This senior-level position will work closely with Security Researchers and Platform Engineers to create sophisticated labs and vulnerable machine environments across hybrid cloud and on-premises infrastructure, enabling hands-on learning experiences for cybersecurity professionals worldwide. The ideal candidate will bring deep expertise in OpenStack, modern DevOps practices, and the integration of generative AI to automate infrastructure management, with proven experience in large-scale migrations and cost optimization. You’ll design resilient, scalable, and secure infrastructure - leveraging AI-driven insights and prompt engineering - to deploy lab environments supporting thousands of concurrent users while maintaining the realistic attack scenarios our students depend on. Duties and responsibilities - Infrastructure & Migration - Design and Engineer complex, multi-tier deployment environments for labs supporting vulnerable machines and realistic attack scenarios using OpenStack - Develop scalable infrastructure solutions across hybrid cloud and on-premises environments - Create solutions that reduce infrastructure costs while improving capabilities and performance - Design secure hosting networks and network topologies that can be used to support realistic offensive cyber activities - Establish infrastructure standards, patterns, and best practices for lab environment deployment - Lab Environment Specialization - Design deployment pipelines for complex, multi-VM cybersecurity lab environments with sub-5 minute deployment targets - Implement static IP addressing and network isolation for thousands of concurrent user lab instances - Optimize lab deployment speed and resource utilization for peak performance - Create infrastructure supporting the deployment of concurrent vulnerable machine instances at scale - Design workspace-based deployment models enabling team collaboration and private lab sessions - Platform Engineering & Automation - Design and implement CI/CD pipelines using GitLab for automated deployment of lab environments - Develop infrastructure automation using known Infrastructure as Code frameworks - Create self-service capabilities for Content Engineers to deploy and manage lab resources efficiently - Implement comprehensive monitoring, logging, and observability solutions for lab environments - Establish disaster recovery and business continuity procedures with minimal downtime requirements - Cloud & Virtualization Management - Engineer and optimize OpenStack deployments as primary infrastructure platform - Implement multi-cloud strategies across AWS, Azure, and GCP where appropriate - Execute cloud cost optimization strategies and resource governance policies - Ensure security and compliance across all cloud and virtualization platforms - Design and implement efficient backup and snapshot strategies for lab environments - Network Engineer & Security - Design complex networks including VPNs, VLANs, and software-defined networking - Implement network segmentation and security controls appropriate for vulnerable lab environments - Configure and manage load balancers, firewalls, and network security appliances - Design network monitoring and traffic analysis capabilities - Ensure proper isolation between student lab environments while maintaining performance Qualifications - Technical Expertise - AI: Proficiency in leveraging generative AI tools and prompt engineering to optimize workflows, enhance creative output, and drive operational efficiency. - OpenStack: Production experience with OpenStack deployment, management, and optimization - Cloud Platforms: 3+ years hands-on experience with AWS, Azure, and Google Cloud Platform - Virtualization: Expert-level knowledge of OpenStack - Networking: Deep understanding of TCP/IP, routing protocols, VPNs, firewalls, and network security - CI/CD: Extensive experience with GitLab CI/CD pipelines and infrastructure automation - Infrastructure as Code: Proficiency with any framework like Terraform, CloudFormation, ARM templates, and configuration management tools - Containerization: Experience with Docker, Kubernetes or other container orchestration - Operating Systems: Advanced knowledge of Linux and Windows Active Directory - Professional Experience - 3+ years of experience in DevOps, Site Reliability Engineering, or Infrastructure Engineer roles - Proven track record of designing and implementing large-scale, distributed systems - Demonstrated experience with infrastructure cost optimization and migration projects - Experience with high-availability and disaster recovery implementations - Background in cybersecurity, penetration testing, or vulnerability research environments (preferred but not a requirement) - Strategic & Analytical Skills - Proactive problem-solving with ability to understand broader context and implications - Experience identifying and proposing solutions before being asked - Ability to challenge requirements and suggest alternative approaches - Track record of improving processes and identifying optimization opportunities - Experience making Engineer decisions with incomplete information Performance Expectations - Ability to work independently with minimal supervision while maintaining high quality standards - Track record of successful large-scale infrastructure projects delivered on time Preferred Qualifications - Experience with cybersecurity tools and vulnerable application deployment - Experience with monitoring tools like Prometheus, Grafana, ELK stack - Familiarity with Offensive Security’s training platforms and methodologies - Open source contributions or technical writing experience Working conditions - This role is a full-time position. Work hours for this position are flexible and will be performed from a home office. Direct reports - This position has no direct reports. Equal Employment Opportunity OffSec provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Role Description Role: Azure DevOps Architect Rate: $80-85/hr. on C2C Location: Menlo Park, CA (Remote) Duration: 12 Months contract Visas: All Mandatory Skills: - Azure Deployment Stacks — Enterprise-scale infrastructure lifecycle governance across hundreds of Azure subscriptions, including resource management, scoping, and deny assignment enforcement. - Open Policy Agent (OPA) / Policy-as-Code — Design and enforcement of security and compliance policies embedded natively across CI/CD pipelines at enterprise scale (500+ engineering teams). - Sigstore — Production-level implementation of artifact signing, verification, and software supply chain integrity pipelines across distributed engineering environments. - Azure Chaos Studio — Resilience engineering through controlled fault injection and distributed system failure experimentation across microservices and cloud-native workloads. - Azure Confidential Computing — Architecture and deployment of secure enclave workloads for high-security, regulated enterprise environments. - SBOM Automation Pipelines — End-to-end automated Software Bill of Materials generation, dependency visibility, and vulnerability tracking integrated into CI/CD workflows. - FluxCD GitOps Platform Engineering — Enterprise-grade GitOps-driven infrastructure delivery and cluster management for large-scale AKS environments. Qualifications - 10+ years of experience in DevOps architecture and cloud platform engineering. - Demonstrated enterprise-scale delivery across Fortune-level organizations in finance, healthcare, retail, or technology. - Proven hands-on experience with all seven mandatory niche skills listed above — generalist profiles will not be considered. - Experience supporting 500+ engineering teams or equivalent large-scale platform environments. - Background in regulated industries with strong understanding of compliance, audit, and security requirements. - Azure DevOps — Enterprise CI/CD platform design and management. - Kubernetes (AKS) — Large-scale cluster platform engineering. - Infrastructure as Code — Terraform and/or Bicep at enterprise scale. - DevSecOps Architecture — Security-first pipeline design and governance. - Secure Artifact Signing Pipelines — Integration with modern supply chain security frameworks. Requirements - Architect and govern centralized CI/CD platforms supporting large engineering organizations using Azure DevOps integrated with OPA policy-as-code enforcement. - Design and implement enterprise infrastructure lifecycle management using Azure Deployment Stacks across multi-subscription Azure environments. - Build and operate GitOps delivery frameworks using FluxCD for large-scale AKS cluster management. - Lead software supply chain security initiatives including Sigstore artifact signing and automated SBOM generation pipelines. - Architect secure workload environments leveraging Azure Confidential Computing for regulated and high-security use cases. - Conduct resilience engineering experiments across distributed microservices using Azure Chaos Studio. - Define and enforce DevSecOps standards, governance frameworks, and security controls across engineering teams. - Collaborate with security, platform, and product engineering teams to align DevOps strategy with enterprise compliance and regulatory requirements. - Mentor senior engineers and establish best practices for GitOps, supply chain security, and policy-driven delivery. Company Description

• Desarrollar y mantener aplicaciones en Java. • Colaborar con equipos para implementar soluciones de DevOps. • Participar en la mejora continua de procesos de desarrollo y despliegue. • Contribuir a la arquitectura y diseño de sistemas.