Cloud Engineer (DevSecOps) w Kraków, Polska

Cloud Engineer (DevSecOps)

Miejsce pracy: Kraków

Technologies we use

Expected

• Terraform
• Python
• Bash
• AWS
• Google Cloud Platform
• GitLab

About the project

We are looking for a Cloud Engineer (DevSecOps) to join our platform team and help build, operate, and improve secure, scalable, and reliable cloud solutions. In this role, you will apply your experience across AWS and GCP cloud platforms, automation, infrastructure, networking, and security to deliver dependable platform capabilities.

Working closely with cross-functional teams, you will deliver cloud platform initiatives, improve automation, and embed security throughout the software delivery lifecycle. You will take ownership of assigned solutions and contribute to building infrastructure and DevSecOps capabilities, with support from senior engineers and technical leads on broader platform improvements.

If you're seeking an exciting opportunity to step out of your comfort zone and make a real impact building better cloud platform, this is the job for you!

This is how we organize our work

This is how we work

• you have influence on the technological solutions applied
• you focus on product development
• agile
• scrum

Team members

• backend developer
• technical leader
• devOps
• project manager

Your responsibilities

• Implement and improve secure cloud platform capabilities, supporting trusted paths to production and security best practices across the delivery lifecycle.
• Develop and maintain automation across infrastructure, CI/CD pipelines, and security controls, reducing manual effort and improving platform reliability.
• Design, implement, and maintain secure delivery pipelines and cloud infrastructure solutions.
• Work closely with the Tech Lead, Principal Engineer, and engineering teams to deliver and evolve the platform in line with the infrastructure strategy.
• Review existing automation solutions, identify opportunities for improvement, and implement agreed changes.
• Deploy, maintain, troubleshoot, and optimise IaaS, PaaS, and platform tooling capabilities across AWS and GCP.
• Contribute to platform standards, engineering guidelines, best practices, and technical documentation.
• Collaborate with engineering, security, and business stakeholders to gather requirements and deliver cloud solutions that meet authentication, authorisation, networking, security, and operational standards.
• Support platform operations through monitoring, incident troubleshooting, problem resolution, and continuous improvement activities.

Our requirements

• Hands-on experience with AWS or GCP (strong practical expertise in at least one platform).
• Proficiency with Terraform and Infrastructure as Code (IaC) principles for modular, scalable, and secure cloud provisioning.
• Solid understanding of cloud networking fundamentals: VPC/VNet architecture, routing, firewall rules, private endpoints, and hybrid/VPN connectivity.
• Practical experience implementing cloud IAM: role-based access control (RBAC), service accounts, least-privilege principle, and workload / workforce identity federation.
• Working knowledge of DevSecOps practices and integrating security guardrails into the software delivery lifecycle.
• Proven experience building and maintaining Continuous Integration & Delivery pipelines using CI/CD platforms (preferably GitLab CI).
• Hands-on scripting proficiency with Python and Bash.
• Experience working in Agile/Scrum delivery environments using work tracking tools like Jira.
• Strong troubleshooting and analytical mindset with a focus on reliability and developer enablement.
• Excellent written and verbal communication skills in English.

Optional

• Multi-cloud experience across both AWS and GCP.
• Experience with enterprise firewall / security appliances (e.g., Google Cloud NGFW or Palo Alto VM-Series).
• Familiarity with observability and logging suites (e.g., Datadog, CloudWatch, or Google Cloud Operations).
• Exposure to container/infrastructure vulnerability scanning tools (e.g., Trivy, Snyk, GitLab integrated scanners).
• Understanding of cloud cost optimisation (FinOps) practices.

What we offer

• 15,000 - 26,000 PLN gross per month on an employment contract
• Private medical healthcare at LUXMED (including dental care) for you and your family
• Medicover sports card (Fit & More package)
• Life insurance financed by the employer
• 30-minute lunch break included in the 8-hour working day
• Work in a highly professional and stimulating atmosphere
• Training & Buddy programme that will allow you to quickly adapt to your new role
• Wellbeing programme for employees
• Co-financing of monthly tickets for the public transport in Krakow
• Comfortable working environment in the office and the possibility of home office
• Language courses, accounting courses, access to LinkedIn Learning and the possibility of co-financing studies and certification
• Employee referral programme

This is how we work on a project

• Continuous Integration
• DevOps
• documentation
• issue tracking tools
• test automation

Development opportunities we offer

• technical knowledge exchange within the company
• time for development of your ideas

Benefits

• sharing the costs of sports activities
• private medical care
• sharing the costs of foreign language classes
• sharing the costs of professional training & courses
• life insurance
• integration events
• dental care
• no dress code

Recruitment stages

• Send in your application
• Talent Acquisition team will then review your application
• You’ll have a telephone interview/one to one conversation
• You’ll be invited to a face to face or virtual interview
• Recruiter will be in touch with feedback and next steps

Kingfisher

We’re Kingfisher, a team made up of over 74,000 passionate people who bring Kingfisher - and all our other brands: Castorama, B&Q, Screwfix, Brico Dépôt and Koçtaş - to life. That’s right, we’re big, but we have ambitions to become even bigger and even better. We want to become the leading home improvement company and grow the largest community of home improvers in the world. And that’s where you come in.

At Kingfisher, our customers come from all walks of life, and so do we. We want to ensure that all colleagues, future colleagues, and applicants to Kingfisher are treated equally regardless of age, gender, marital or civil partnership status, colour, ethnic or national origin, culture, religious belief, philosophical belief, political opinion, disability, gender identity, gender expression or sexual orientation.

We are open to flexible and agile working. Therefore, we offer colleagues a blend of working from home and our office, located in Kraków. Talk to us about how we can best support you!

At Kingfisher, we value the perspectives that any new team members bring, and we want to hear from you. We encourage you to apply for one of our roles, even if you do not feel you meet 100% of the requirements.

In return, we offer an inclusive environment, where what you can achieve is limited only by your imagination! We encourage new ideas, actively support experimentation, and strive to build an environment where everyone can be their best self.

Klikając w przycisk „Aplikuj” lub w inny sposób wysyłając zgłoszenie rekrutacyjne, zgadzasz się na przetwarzanie Twoich danych osobowych przez KFS sp. z o.o. z siedzibą w: Wielicka 28, 30-552 Kraków (Pracodawca), jako administratora danych osobowych w celu przeprowadzenia rekrutacji na stanowisko wskazane w ogłoszeniu.
Twoje dane osobowe będą przetwarzane w oparciu o następujące podstawy prawne: (a) aby podjąć działania na Twoje żądanie przed zawarciem umowy (np. informacje o oczekiwanym wynagrodzeniu i dostępności do rozpoczęcia pracy); (b) w oparciu o nasz prawnie uzasadniony interes (np. imię, nazwisko, data urodzenia, dane kontaktowe, wykształcenie, kwalifikacje zawodowe, przebieg dotychczasowego zatrudnienia); c) w oparciu o Twoją zgodę, która wyrażona jest poprzez przeslanie dokumentów aplikacyjnych zawierających takie informacje jak np. wizerunek czy zainteresowania. Podanie wszystkich danych osobowych, o których mowa powyżej jest dobrowolne, natomiast dane wymienione w lit. a) i b) są niezbędne do wzięcia udziału w rekrutacji. Niepodanie danych skutkuje brakiem możliwości rozpatrzenia kandydatury. Podanie pozostałych danych jest dobrowolne, ale może pomóc w sprawnym przeprowadzeniu procesu rekrutacji. Masz prawo żądać dostępu do Twoich danych (w tym uzyskania ich kopii), sprostowania danych, ich usunięcia, ograniczenia przetwarzania, przeniesienia, jak również wniesienia sprzeciwu wobec ich przetwarzania. Masz także prawo wniesienia skargi do Prezesa Urzędu Ochrony Danych Osobowych. Twoje dane osobowe mogą zostać przekazane dostawcom usługi publikacji ogłoszeń o pracę, dostawcom systemów do zarządzania rekrutacjami, dostawcom usług IT (hosting), dostawcom systemów informatycznych. Podane przez Ciebie dane osobowe nie będą wykorzystywane w celu profilowania albo podejmowania decyzji w sposób zautomatyzowany. Twoje dane osobowe będą przetwarzane przez okres maks. 1 roku od zakończenia publikacji ogłoszenia, chyba, że wyraziłeś odrębną zgodę na wykorzystanie Twoich danych osobowych w przyszłych rekrutacjach. W celu realizacji praw lub w przypadku jakichkolwiek pytań związanych z przetwarzaniem Twoich danych osobowych skontaktuj się z nami pod adresem: [email protected].