DevSecOps Engineer

DevSecOps Engineer

About Leaf Space

JOB OVERVIEW

We're building a satellite-based mesh network, and the software and infrastructure behind it — ground segment services, network orchestration, telemetry pipelines, and embedded flight/payload software tooling — need to be shipped fast and run securely. As DevSecOps Engineer you will design, implement and continuously improve the CI/CD, cloud and infrastructure environment, contribute directly to software development across the stack, and build security into every stage rather than bolting it on at the end. This is a hands-on role spanning development, operations, and security for systems that are both mission-critical and subject to strict regulatory obligations.

RESPONSIBILITIES

• Design, build, and maintain CI/CD pipelines for ground-segment, network, and embedded software, with automated testing, security scanning, and controlled release gates.

• Contribute to automation tooling and software development supporting the platform and infrastructure.

• Collaborate with embedded software teams to support build toolchains, cross-compilation and integration workflows.

• Manage cloud and on-prem infrastructure as code (Terraform, Ansible, or equivalent) with reproducible, auditable deployments.

• Operate and secure containerized and orchestrated workloads (Docker, Kubernetes), including image hardening, registry scanning, and runtime security.

• Implement observability — logging, metrics, tracing, and alerting — for reliable, debuggable production systems.

• Harden systems and enforce access control, network segmentation, and least-privilege principles across environments.

• Support compliance and audit readiness against frameworks relevant to critical infrastructure (e.g., NIS2, ISO 27001), contributing to policies, controls, and evidence.

• Contribute to incident response, patch management, and secure configuration baselines.

• Partner with software, network, and mission teams

QUALIFICATIONS AND STUDIES

• Degree in computer science, engineering, or equivalent practical experience.

• Roughly 3–6 years in DevOps, SRE, platform, security, or software engineering roles.

REQUIREMENTS

1. Tech skills

• Strong Linux knowledge (required) — administration, networking, and development on Linux systems.

• Solid software development skills, with experience writing production code (Python, Go, C/C++, Rust or similar).

• Familiarity with embedded software development environments is considered a plus.

• Strong hands-on skills with CI/CD tooling (GitLab CI, GitHub Actions, Jenkins, or similar) and infrastructure as code.

• Solid networking and cloud fundamentals (AWS, GCP, or Azure).

• Practical experience integrating security tooling into pipelines and a genuine security mindset.

• Clear communicator who can work across development, operations, and security.

1. Soft skills

• Excellent cross-functional communication skills to interface effectively with engineering teams, suppliers and management.

• Ability to translate ambiguous or evolving requirements into concrete, actionable specifications.

• Rigorous, detail-oriented approach, with a preference for measured/verified data over assumptions, and transparency when prior estimates need correction.

• Comfortable working in a fast-moving, still-maturing product environment, iterating on both architecture and hands-on implementation.

• Fluent English (written and spoken) required, given interaction with external international partners.

WHAT WE OFFER

• A flat and collaborative organizational structure

• A fast‑paced and professional environment within a rapidly growing space scale‑up

• Challenging projects with real impact on the global space ecosystem

• An international and diverse workplace

• Comprehensive benefits package, including a welfare platform, meal vouchers, a hybrid work policy supporting work-life balance, and training opportunities

COMPENSATION & TRANSPARENCY:

• Reports to: Head of Engineering

• Career level: P4 – Senior Professional

• Job location: Lomazzo (Como), Italy | Hybrid work model

• Salary range: 45-70K

• Variable compensation: 10% of annual gross salary

• Benefits: Competitive benefits package, including a welfare platform and meal vouchers in Italy, with equivalent local benefits provided where applicable

• Expected start date: 1.10.2026