Senior DevOps & DevSecOps Engineer İş İlanı

As Türkiye’s largest fitness community with our MAC/One, MACFit, MAC Studio and NuSpa brands, we are looking for a Senior DevOps & DevSecOps Engineer to join our Technology team at our headquarters in Ortaköy, Istanbul. Being part of MAC means being part of a community that continuously evolves, improves and moves towards a better life. Here, ideas matter, teamwork is encouraged, and feeling good is just as important as working effectively. If you want to be part of our active lifestyle community and build secure, scalable and high-performing technology environments, we would love to hear from you. What Will You Do? Design and manage cloud and hybrid infrastructure based on high availability, scalability and security principles Build, improve and continuously optimize enterprise CI/CD processes Define and implement Infrastructure as Code (IaC) standards Automate operational processes to improve efficiency and reliability Integrate security controls into the SDLC and implement a Shift-Left Security approach Design and manage automated security testing and compliance controls Manage Software Supply Chain Security and SBOM processes Implement Policy as Code practices Manage enterprise cloud platforms, primarily AWS and Microsoft Azure Develop automation and provisioning processes using Terraform and Bicep Drive performance, capacity and cost optimization across infrastructure and systems Design, deploy and operate Kubernetes platforms Establish container security and governance standards Manage monitoring, logging, alerting and observability solutions Track and manage SLA, SLO and KPI metrics Lead Incident Management and Root Cause Analysis processes for critical incidents What Are We Looking For? Bachelor's degree in Computer Engineering, Software Engineering, Information Technology or a related field 8+ years of experience in Infrastructure Engineering, Cloud Engineering, Platform Engineering or DevOps 5+ years of enterprise DevOps experience Proven experience managing critical systems and services Strong technical knowledge of cloud, automation, containerization and infrastructure management Solid understanding of CI/CD, IaC and modern DevOps practices Strong analytical and problem-solving skills with a continuous improvement mindset Ability to collaborate effectively across teams and communicate complex technical topics to different stakeholders DevSecOps & Security Hands-on experience in the following areas: Secure CI/CD Pipelines SAST, DAST, SCA Container Image Scanning Vulnerability Management Secrets Management Security Automation Software Supply Chain Security SBOM Policy as Code Kubernetes Security Cloud Security Architecture Experience with tools such as: SonarQube, Snyk, Checkmarx, Veracode, Trivy, Prisma Cloud, Aqua Security and OWASP ZAP Security & Compliance Knowledge and experience in the following areas: Zero Trust Architecture IAM / RBAC / PIM Security by Design Secure Software Supply Chain Kubernetes Security Cloud Security Architecture ISO 27001 NIST SOC 2 GDPR PCI-DSS