Senior DevSecOps Engineer (Azure/AWS)

About the role

Tana, a Nairobi-based start-up that trains young people in Africa for tech and data roles, is hiring a Senior DevSecOps Engineer to own cloud infrastructure, CI/CD pipelines and security for a commercial real estate software company. The platform helps companies manage property leases, documents, key dates, tasks and lease accounting compliance. Azure is the primary cloud platform, with AWS also in use. The priority is a DevSecOps engineer on the Microsoft stack who can work independently, identify risks proactively and learn unfamiliar tools.

Key responsibilities

• Build and manage cloud infrastructure on Azure and AWS as code with Terraform.
• Set up and maintain Azure DevOps CI/CD pipelines for building, testing and deploying the platform.
• Apply security best practices across cloud and on-premises systems, including access control, vulnerability management, patching and compliance.
• Use Microsoft Defender for Cloud, Endpoint and Identity to monitor and respond to security issues.
• Set up logging, metrics and alerting for visibility into production systems.
• Administer Windows and Linux servers, including patching, hardening and availability.
• Automate repetitive work with PowerShell, Bash or Python.
• Support Microsoft 365 and Entra ID administration, device management via Intune, and handle IT escalations when needed.

Required profile

• 5+ years of experience in DevOps or cloud engineering roles.
• Strong hands-on Azure experience, including production infrastructure and core services (compute, networking, identity, storage, Key Vault).
• Some hands-on AWS experience in addition to Azure.
• Ability to take ownership of problems and work independently, and to learn new tools from documentation.
• Proactive approach to identifying and raising infrastructure and security risks early.

Required skills

• Infrastructure as code with Terraform or a similar tool (Bicep or CloudFormation).
• CI/CD pipeline experience, ideally Azure DevOps; GitHub Actions is acceptable.
• Cloud and DevOps security: IAM, secrets management, network security, vulnerability management.
• Windows and Linux administration, scripting in PowerShell, Bash or Python.
• Monitoring and observability with tools such as Azure Monitor or Application Insights.
• Nice to have: Microsoft 365, Entra ID, Intune, Defender for Cloud, Azure Landing Zones, PBX/VoIP, helpdesk experience, and Azure/AWS/security certifications.

The position is remote (based in Kenya), with working hours of 1:00 PM to 10:00 PM EAT and flexibility outside these hours for low-traffic deployments. Selected candidates are hired by Tana and embedded full-time with the client.