CloudOps Engineer

Tricentis

. Harden CI/CD pipelines using least-privilege tokens, OIDC federation, pinned dependencies and actions, and protected branches and environments .

Posted 11/9/2026full-timeBrno • CzechiaJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in securing CI/CD pipelines, managing cloud security controls across AWS and Azure, and implementing build integrity measures. Proficient in automating security processes and conducting vulnerability assessments in cloud environments.

Highest-signal resume keywords

CI/CD Pipeline SecurityCloud Security Controls (AWS, Azure)Container Security (Docker, Kubernetes)Infrastructure-as-Code (Terraform, Bicep)Security Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CI/CD PipelinesAWSAzureDockerKubernetesTerraformPythonBashPowerShellIAM

Soft Skills

Written CommunicationVerbal Communication

Tools & Technologies

GitHub ActionsAzure DevOpsHelmCloudFormationSecrets Management

Industry Keywords

Supply Chain RiskArtifact SigningSBOM GenerationSLSAThreat Modeling

Tech Stack

Tools & technologies

AWSAzureCloudDockerGoogle Cloud PlatformKubernetesOpen SourcePythonTerraform

About the role

Key responsibilities & impact

Harden CI/CD pipelines using least-privilege tokens, OIDC federation, pinned dependencies and actions, and protected branches and environments
Implement and operate build integrity and provenance controls, including artifact signing, SBOM generation, and SLSA-aligned attestations
Integrate and tune software composition analysis, container image scanning, secrets detection, and IaC scanning
Manage security of artifact registries and package sources
Evaluate and monitor third-party dependencies, open source components, and AI artifacts for supply chain risk
Implement and maintain cloud security controls across AWS and Azure, with exposure to GCP
Secure containerized workloads and Kubernetes clusters
Build and support security guardrails in multi-cluster, hybrid, and serverless environments using GitOps and infrastructure-as-code
Continuously audit cloud posture, identity and access configurations, and network exposure, and drive remediation
Support WAF, DDoS protection, secrets management, and identity federation services
Automate manual security processes into developer-friendly workflows
Participate in threat modeling for pipelines, cloud architectures, and platform capabilities
Contribute to vulnerability triage and incident response
Write documentation, runbooks, and secure patterns

Requirements

What you’ll need

2+ years of experience in DevOps, cloud engineering, platform engineering, or security engineering
2+ years of hands-on experience with AWS or Azure services in a production environment
Hands-on experience building or maintaining CI/CD pipelines, such as GitHub Actions or Azure DevOps
Understanding of how CI/CD pipelines can be attacked and defended
Working knowledge of Docker, Kubernetes, and Helm
Experience with Terraform, Bicep/ARM templates, or CloudFormation
Proficiency in Python, Bash, or PowerShell
Understanding of IAM, RBAC, OAuth, OIDC, and workload identity
Familiarity with dependency confusion, credential leakage in pipelines, misconfigured storage, and over-privileged identities
Communicative written and verbal communication skills in English

Benefits

Comp & perks

Flexible working schedule (no core hours)
Learning and career growth opportunities
25 days of paid time off
3 Sick Days
2 days of paid Volunteering Leave per year
Hybrid work environment with home-office allowance
Meal allowance
Pension Contribution
Life & Disability Insurance
Paid Sickness Leave
Events for employees to learn, celebrate, and socialize
A team of passionate professionals who are experts in their fields