Senior DevSecOps Engineer

We are looking for an experienced Senior DevSecOps Engineer to own our cloud infrastructure and the security built into it. PayPlus processes payments for thousands of merchants in Israel and Europe, and everything we run sits inside a PCI-DSS environment. You'll set the DevOps standards and architecture, run our cloud, Kubernetes, and CI/CD, and make sure security controls run automatically in every build and deploy. You'll work closely with our CISO, Architect, and dev teams, and take a leading part in our move to microservices. Key Responsibilities Technical Leadership: Lead the DevOps domain, define standards and architecture, and make the technical calls for the platform. Cloud & Kubernetes: Build and run our multi-region cloud (AWS/GCP/Azure) and Kubernetes environments in Israel and Europe, all managed as code with Terraform or Pulumi. Secure CI/CD: Build pipelines with security gates (SAST, DAST, SCA, container, IaC, and secrets scanning). Critical findings block the release. Identity, Access & Secrets: Own cloud IAM and least-privilege access, manage secrets and encryption, and harden clusters and microservices. Vulnerability Management: Scan continuously, prioritize by real risk, follow findings through to a fix with the dev teams, and close penetration-test findings. Monitoring & Incident Response: Run monitoring, alerting, and the SIEM, and lead the technical side of security and production incidents with the CISO, through post-mortem. Compliance in Practice: Turn PCI-DSS, PSD2, and EMI requirements into technical controls, and own the technical evidence for audits. Reliability: Own DR, high availability, capacity planning, and cloud costs, including our MongoDB infrastructure. Requirements 5+ years as a DevOps, SRE, or Platform Engineer, including technical leadership. Strong hands-on cloud experience, AWS preferred, including its security services. Production experience with Kubernetes and Docker, including cluster hardening. Hands-on experience building security tools into CI/CD. Infrastructure as Code with Terraform, CloudFormation, or Pulumi. Solid experience with IAM, secrets management, SIEM, and handling security incidents. Deep understanding of networking (VPC, DNS, load balancers, WAF, and VPN) and segmentation. Strong Linux and scripting skills (Bash and/or Python). Nice to Have Hands-on experience in a PCI-DSS environment, or SOC 2 / ISO 27001. Background in fintech or payments. Experience with microservices, service mesh, and GitOps (ArgoCD, Flux). Experience with CSPM tools such as Wiz, Prisma Cloud, or Orca. Certifications such as AWS Security Specialty, CKS, or CCSP. What We're Looking For The ideal candidate is a DevOps leader who treats security as part of the job, not someone else's job. They would rather add a check to the pipeline than write a policy document, and they can discuss a PCI requirement with the CISO in the morning and ship the Terraform that meets it in the afternoon. If you want to own both the infrastructure and the security of a growing payments platform, we'd love to hear from you.