DevSecOps Engineer

As our Founding DevOps, Security & AI Operations Engineer you will establish the automation, infrastructure, security, and AI?driven operational foundations that let Evalon ship reliable and compliant software at startup speed.  60?% of your time will focus on classical DevOps & Site Reliability engineering. A further  20?% will be dedicated to Operational?AI & Developer?Experience tooling—maintaining Markdown standards, evolving our AI MCP libraries, and integrating AI agents into cross?app workflows to improve operational KPI and Engineering best practices. The remaining  20?% will concentrate on Security & Compliance: crafting the roadmap, meeting with customers & auditors, and driving implementation end?to?end.

This is a 100?% full?time position dedicated to the company, ensuring your full focus on the startup’s success.

Key Responsibilities

1 · Core DevOps & Site Reliability  (≈? 60?%)

• Design and build cloud envs: provision scalable, secure infrastructure?as?code (IaC) across environments, adopting least?privilege and repeatable patterns.
• Own CI/CD pipelines: ensure fast, deterministic deployments, rollback safety, and policy checks that balance velocity and compliance.
• Implement observability stack: centralised logging, metrics, tracing, and alerting that give engineers and AI systems actionable insights.
• Drive incident management: establish on?call procedures, post?mortems, and blameless culture to continually raise reliability.
• Champion cost?efficiency: monitor cloud spend and recommend optimisations without compromising performance.

2 · Operational?AI & Developer?Experience Tooling  (≈? 20?%)

• Maintain operational AI abilities, Markdown structure & standardsВ - from cloud architecture to product spec markdowns across repos to MCP orchestration of data-flows for the entire copmany AI first operations (from FIGMA via n 8n to Github etc...)
• Integrate AI agents into ops pipelines: prototype and deploy bots for auto?triaging alerts, suggesting infrastructure changes, observability and generating status digests.
• Measure impact: define DORA and Dev Experience KPIs for automation coverage, MTTR reduction, and developer happiness; iterate based on data.

3 · Security, IT & Compliance  (≈? 20?%)

• Own the security & compliance roadmapВ  (SOCВ  2 TypeВ II, ISO?Показати , GDPR, etc.): define milestones, tooling, and evidence?collection strategy, then drive end?to?end execution.
• Represent Evalon to customers, prospects, and auditors: join security reviews and due?diligence calls, clearly articulating our controls and risk posture.
• Continuously improve postureВ & guardrails: automate CI/CD vulnerability scanning to block insecure changes before they reach production, secrets management, IAM least?privilege, and incident response playbooks; track compliance KPIs.

4В В·В Hybrid Work & Async CollaborationВ В  (Cross?cutting)

• Maintain async workflows that enable a distributed working environment: publish concise updates, record decisions, and leverage living documentation and AI?generated context digests so everyone—humans and machines—remains aligned.
• Ensure in?office presence: workВ  3?4 days per week from our Rishpon HQ, ensuring face?to?face collaboration with the engineering team; outside office days, remain responsive via async channels.
• Champion remote?friendly tooling: standardise issue trackers, PR templates, and doc hubs so context is discoverable across time zones.

Experience & Qualifications

• 5+?yearsВ of hands?on DevOps/SRE or infrastructure engineering experience in modern cloud envs.
• Deep expertise withВ AWSВ architectures and services; ability to design for scale, reliability, and cost efficiency.
• Track record building or operatingВ AI?first products—hosting models, managing training pipelines, and integrating AI inference in production environments is a big plus
• Experience withВ big?dataВ platforms and streaming pipelines (e.g., Kafka, Spark, Snowflake) is a strong plus.
• Strong security mindset and familiarity with compliance frameworks (SOCВ  2, ISO?Показати , GDPR) and DevSecOps practices.

Tech stack

DevOpsВ В CI/CDВ В AWS ECS/S 3В В API securityВ В Regulatory ComplianceВ В FigmaВ В GitВ В HubВ В kafkaВ В SPARKВ В Snowflake