Cloud Engineer (DevSecOps)

About the Position

We’re Kingfisher, a team made up of over 74,000 passionate people who bring Kingfisher - and all our other brands: Castorama, B&Q, Screwfix, Brico Dépôt and Koçtaş - to life. That’s right, we’re big, but we have ambitions to become even bigger and even better. We want to become the leading home improvement company and grow the largest community of home improvers in the world. And that’s where you come in.

At Kingfisher, our customers come from all walks of life, and so do we. We want to ensure that all colleagues, future colleagues, and applicants to Kingfisher are treated equally regardless of age, gender, marital or civil partnership status, colour, ethnic or national origin, culture, religious belief, philosophical belief, political opinion, disability, gender identity, gender expression or sexual orientation.

We are open to flexible and agile working. Therefore, we offer colleagues a blend of working from home and our office, located in Kraków. Talk to us about how we can best support you!

At Kingfisher, we value the perspectives that any new team members bring, and we want to hear from you. We encourage you to apply for one of our roles, even if you do not feel you meet 100% of the requirements.

In return, we offer an inclusive environment, where what you can achieve is limited only by your imagination! We encourage new ideas, actively support experimentation, and strive to build an environment where everyone can be their best self. Interested? Great, apply now and help us to Power the Possible.

Responsibilities

• Implement and improve secure cloud platform capabilities, supporting trusted paths to production and security best practices across the delivery lifecycle.
• Develop and maintain automation across infrastructure, CI/CD pipelines, and security controls, reducing manual effort and improving platform reliability.
• Design, implement, and maintain secure delivery pipelines and cloud infrastructure solutions.
• Work closely with the Tech Lead, Principal Engineer, and engineering teams to deliver and evolve the platform in line with the infrastructure strategy.
• Review existing automation solutions, identify opportunities for improvement, and implement agreed changes.
• Deploy, maintain, troubleshoot, and optimise IaaS, PaaS, and platform tooling capabilities across AWS and GCP.
• Contribute to platform standards, engineering guidelines, best practices, and technical documentation.
• Collaborate with engineering, security, and business stakeholders to gather requirements and deliver cloud solutions that meet authentication, authorisation, networking, security, and operational standards.
• Support platform operations through monitoring, incident troubleshooting, problem resolution, and continuous improvement activities.

Requirements

• Hands-on experience with AWS or GCP (strong practical expertise in at least one platform).
• Proficiency with Terraform and Infrastructure as Code (IaC) principles for modular, scalable, and secure cloud provisioning.
• Solid understanding of cloud networking fundamentals: VPC/VNet architecture, routing, firewall rules, private endpoints, and hybrid/VPN connectivity.
• Practical experience implementing cloud IAM: role-based access control (RBAC), service accounts, least-privilege principle, and workload / workforce identity federation.
• Working knowledge of DevSecOps practices and integrating security guardrails into the software delivery lifecycle.
• Proven experience building and maintaining Continuous Integration & Delivery pipelines using CI/CD platforms (preferably GitLab CI).
• Hands-on scripting proficiency with Python and Bash.
• Experience working in Agile/Scrum delivery environments using work tracking tools like Jira.
• Strong troubleshooting and analytical mindset with a focus on reliability and developer enablement.
• Excellent written and verbal communication skills in English.

Nice to Have

• Multi-cloud experience across both AWS and GCP.
• Experience with enterprise firewall / security appliances (e.g., Google Cloud NGFW or Palo Alto VM-Series).
• Familiarity with observability and logging suites (e.g., Datadog, CloudWatch, or Google Cloud Operations).
• Exposure to container/infrastructure vulnerability scanning tools (e.g., Trivy, Snyk, GitLab integrated scanners).
• Understanding of cloud cost optimisation (FinOps) practices.

We Offer

• Competitive salary: 15,000 - 26,000 PLN gross per month on an employment contract.
• Private medical healthcare at LUXMED (including dental care) for you and your family.
• Medicover sports card (Fit & More package).
• Life insurance financed by the employer.
• 30-minute lunch break included in the 8-hour working day.
• Work in a highly professional and stimulating atmosphere.
• Training & Buddy programme that will allow you to quickly adapt to your new role.
• Wellbeing programme for employees.
• Co-financing of monthly tickets for the public transport in Krakow.
• Comfortable working environment in the office and the possibility of home office.
• Language courses, accounting courses, access to LinkedIn Learning and the possibility of co-financing studies and certification.
• Employee referral programme.

About the Company

We’re an innovative, international retailer on a journey to actively make a difference. Always striving to take that next step. You can be part of the difference. From bottom to top you can progress in a collaborative environment. So, why not Kingfisher?

Application Process

1. Application: Send in your application via our Kingfisher Careers website.
2. Review: A member of the Talent Acquisition team will then review your application and let you know if you have progressed to the next stage of the process.
3. Interview 1: You’ll then have a telephone interview/one to one conversation with a recruiter.
4. Interview 2: As you progress, you’ll be invited to attend a face to face or virtual interview.
5. Feedback: Your recruiter will be in contact with feedback and, if successful, the details of your job offer!

Ready to get started?

Apply Now