Senior DevSecOps Engineer

We are looking for an experienced DevOps Engineer with strong hands-on skills in Azure cloud infrastructure, DevOps practices, and Kubernetes, complemented by expertise in infrastructure security within regulated environments, such as banking or financial services.

In this role, you will design, implement, and maintain cloud infrastructure using tools like Azure DevOps, Bicep, and Flux2 for GitOps-based management of AKS clusters, implement and maintain CI/CD pipeline templates. In addition to building scalable and resilient systems, you’ll apply secure deployment practices and help ensure compliance with industry frameworks such as NIST, CIS Benchmarks, or ISO 27001.

Key responsibilities

• Design, implement, and maintain Azure infrastructure with a focus on scalability, security, and resilience
• Use Bicep and Flux2 GitOps workflows to define and manage infrastructure as code for AKS and related services
• Guide and support developers on CI/CD pipelines in Azure DevOps, incorporating testing, security scans, automated deployment workflows, and helping them to operate their services in Azure
• Secure infrastructure using Azure-native tools (e.g., IAM, Azure Policy, RBAC, Defender for Cloud)
• Contribute to the design and enforcement of security controls aligned with frameworks like NIST, CIS, or internal risk standards
• Maintain logging, monitoring, and alerting for cloud resources and deployments to ensure system health, observability and traceability
• Collaborate with developers to promote secure-by-default infrastructure patterns.
• Support hybrid cloud connectivity and secure data transfer between on-premise and Azure environments and help migration of on-premise infrastructure to Azure
• Document infrastructure and security practices, contributing to audit readiness and internal compliance reporting

Qualifications and previous experience

• Proven experience as a DevOps Engineer or Infrastructure Engineer with a focus on Azure
• Experience managing Kubernetes workloads (AKS) and using GitOps tooling e.g. Flux2, ArgoCD
• Strong understanding of Azure DevOps, including pipelines, environments, and deployment strategies
• Exposure to secure infrastructure practices in regulated environments (banking, fintech, insurance, etc.)
• Experience working with security and compliance frameworks (e.g., NIST, CIS Benchmarks, ISO 27001)
• Experience integrating security tools (vulnerability scanners, policy-as-code) into DevOps workflows
• Experience with setting up, operating and optimizing observability and monitoring tools like Azure AppInsights/LogAnalytics, Prometheus, Grafana

Nice to haves

• Experience with .NET backend applications and API deployments
• Certifications: e.g. Azure DevOps Engineer, Azure Administrator, Azure Solution Architect, CKA/CKS
• Working knowledge of container-, application security and respective tools (e.g., Trivy, Aqua, Github Advanced Security For Azure Devops)
• Experience with Jira administration

What we offer

• Technical challenge: work on always-on, high-volume services that must stay up around the clock
• An international and fast-paced work environment
• Hybrid work flexibility
• Wellness allowance
• Professional development budget

About TF Bank

TF Bank was founded in Sweden in 1987 with the purpose of offering finance solutions to customers who ordered goods from mail order catalogs. Over time, the Group has grown both in terms of product offerings, revenues and geographic presence. Today, TF Bank offers consumer banking services through a high degree of automation in its proprietary IT platform designed for scalability and adaptation to various products, countries, currencies and digital banking solutions as well as a white-label BNPL services offered under Avarda brand.