Cloud Engineer - DevSecOps

Overview

Cloud Engineer (DevSecOps) 

(Hybrid/Kraków – 1 day per week in the office)

We’re Kingfisher, a team made up of over 74,000 passionate people who bring Kingfisher - and all our other brands: Castorama, B&Q, Screwfix, Brico Dépôt and Koçtaş - to life. That’s right, we’re big, but we have ambitions to become even bigger and even better. We want to become the leading home improvement company and grow the largest community of home improvers in the world. And that’s where you come in. 

At Kingfisher, our customers come from all walks of life, and so do we. We want to ensure that all colleagues, future colleagues, and applicants to Kingfisher are treated equally regardless of age, gender, marital or civil partnership status, colour, ethnic or national origin, culture, religious belief, philosophical belief, political opinion, disability, gender identity, gender expression or sexual orientation. 

We are open to flexible and agile working. Therefore, we offer colleagues a blend of working from home and our office, located in Kraków. Talk to us about how we can best support you! 

At Kingfisher, we value the perspectives that any new team members bring, and we want to hear from you. We encourage you to apply for one of our roles, even if you do not feel you meet 100% of the requirements. 

In return, we offer an inclusive environment, where what you can achieve is limited only by your imagination! We encourage new ideas, actively support experimentation, and strive to build an environment where everyone can be their best self. Interested? Great, apply now and help us to Power the Possible. 

We offer a competitive benefit package and plenty of opportunities to stretch and grow your career:  

• 15,000 - 26,000 PLN gross per month on an employment contract
• Private medical healthcare at LUXMED (including dental care) for you and your family 

• Medicover sports card (Fit & More package) 

• Life insurance financed by the employer 

• 30-minute lunch break included in the 8-hour working day 

• Work in a highly professional and stimulating atmosphere 

• Training & Buddy programme that will allow you to quickly adapt to your new role 

• Wellbeing programme for employees 

• Co-financing of monthly tickets for the public transport in Krakow 

• Comfortable working environment in the office and the possibility of home office 

• Language courses, accounting courses, access to LinkedIn Learning and the possibility of co-financing studies and certification 

• Employee referral programme 

What's the job?

About the role 

We are looking for a Cloud Engineer (DevSecOps) to join our platform team and help build, operate, and improve secure, scalable, and reliable cloud solutions. In this role, you will apply your experience across AWS and GCP cloud platforms, automation, infrastructure, networking, and security to deliver dependable platform capabilities. 

Working closely with cross-functional teams, you will deliver cloud platform initiatives, improve automation, and embed security throughout the software delivery lifecycle. You will take ownership of assigned solutions and contribute to building infrastructure and DevSecOps capabilities, with support from senior engineers and technical leads on broader platform improvements. 

If you're seeking an exciting opportunity to step out of your comfort zone and make a real impact building better cloud platform, this is the job for you! 

Responsibilities 

• Implement and improve secure cloud platform capabilities, supporting trusted paths to production and security best practices across the delivery lifecycle. 

• Develop and maintain automation across infrastructure, CI/CD pipelines, and security controls, reducing manual effort and improving platform reliability. 

• Design, implement, and maintain secure delivery pipelines and cloud infrastructure solutions. 

• Work closely with the Tech Lead, Principal Engineer, and engineering teams to deliver and evolve the platform in line with the infrastructure strategy. 

• Review existing automation solutions, identify opportunities for improvement, and implement agreed changes. 

• Deploy, maintain, troubleshoot, and optimise IaaS, PaaS, and platform tooling capabilities across AWS and GCP. 

• Contribute to platform standards, engineering guidelines, best practices, and technical documentation. 

• Collaborate with engineering, security, and business stakeholders to gather requirements and deliver cloud solutions that meet authentication, authorisation, networking, security, and operational standards. 

• Support platform operations through monitoring, incident troubleshooting, problem resolution, and continuous improvement activities. 

What you'll bring

• Hands-on experience with AWS or GCP (strong practical expertise in at least one platform). 
• Proficiency with Terraform and Infrastructure as Code (IaC) principles for modular, scalable, and secure cloud provisioning. 
• Solid understanding of cloud networking fundamentals: VPC/VNet architecture, routing, firewall rules, private endpoints, and hybrid/VPN connectivity. 

• Practical experience implementing cloud IAM: role-based access control (RBAC), service accounts, least-privilege principle, and workload / workforce identity federation. 
• Working knowledge of DevSecOps practices and integrating security guardrails into the software delivery lifecycle. 
• Proven experience building and maintaining Continuous Integration & Delivery pipelines using CI/CD platforms (preferably GitLab CI). 
• Hands-on scripting proficiency with Python and Bash. 
• Experience working in Agile/Scrum delivery environments using work tracking tools like Jira. 

• Strong troubleshooting and analytical mindset with a focus on reliability and developer enablement. 

• Excellent written and verbal communication skills in English. 

Nice to have 

• Multi-cloud experience across both AWS and GCP. 

• Experience with enterprise firewall / security appliances (e.g., Google Cloud NGFW or Palo Alto VM-Series). 

• Familiarity with observability and logging suites (e.g., Datadog, CloudWatch, or Google Cloud Operations). 

• Exposure to container/infrastructure vulnerability scanning tools (e.g., Trivy, Snyk, GitLab integrated scanners). 

• Understanding of cloud cost optimisation (FinOps) practices. 

To get to know us better visit: 

LinkedIn 

Kingfisher plc