Senior DevSecOps Engineer

About us

At Tana, we believe that your skills and your character define you, not where in the world you were born. We empower brilliant young people in Africa to start meaningful careers by training them for tech and data roles, and embedding them into full-time, remote positions with companies across North America and Europe. We're a rapidly growing start-up headquartered in Nairobi, Kenya, with a vision to change the world of work.

Position Overview

We are hiring a Senior DevSecOps Engineer to own cloud infrastructure, CI/CD pipelines and security for a commercial real estate software company. Its platform helps companies manage property leases, documents, key dates, tasks and lease accounting compliance.

Azure is the primary cloud platform, with AWS also part of the environment. The priority is a strong DevSecOps engineer on the Microsoft stack who can work independently, identify risks proactively and learn unfamiliar tools and services.

Responsibilities

• Build and manage cloud infrastructure on Azure and AWS, defined as code using Terraform.
• Set up and maintain Azure DevOps CI/CD pipelines for building, testing and deploying the platform.
• Apply security best practices across cloud and on-premises systems, including access control, vulnerability management, patching and compliance.
• Use Microsoft Defender for Cloud, Endpoint and Identity to monitor and respond to security issues.
• Set up logging, metrics and alerting to provide visibility into production systems.
• Administer Windows and Linux servers, including patching, hardening and maintaining availability.
• Automate repetitive work using PowerShell, Bash or Python.
• As a secondary responsibility, support Microsoft 365 and Entra ID administration, including users, groups, access and MFA; support device management through Intune; and handle IT escalations when needed.

Requirements

• 5+ years of experience in DevOps or cloud engineering roles.
• Strong hands-on Azure experience, including building and operating production infrastructure and working with core services across compute, networking, identity, storage and Key Vault.
• Some hands-on AWS experience in addition to Azure. Azure is the primary platform, but AWS exposure is required.
• Infrastructure-as-code experience with Terraform or a similar tool, such as Bicep or CloudFormation.
• Experience building or maintaining CI/CD pipelines, ideally in Azure DevOps. GitHub Actions or similar experience is acceptable.
• Knowledge of cloud and DevOps security best practices, including identity and access management, secrets management, network security and vulnerability management.
• Good general working knowledge of both Windows and Linux servers, with confidence administering both.
• Scripting experience in PowerShell, Bash or Python.
• Experience with monitoring and observability, including logging, metrics and alerting, using tools such as Azure Monitor or Application Insights.
• Ability to take ownership of a problem and work independently without close supervision.
• A proactive approach to identifying and raising infrastructure or security risks before they become incidents.
• Ability to learn new tools and services, including working independently from documentation.

Nice to have

• Microsoft 365 administration, including Exchange Online, SharePoint, Teams and licensing.
• Entra ID administration, including groups, conditional access and MFA.
• Device management with Intune.
• Experience with Microsoft Defender for Cloud, Endpoint or Identity.
• Azure Landing Zones or Cloud Adoption Framework experience.
• PBX/VoIP telephony administration.
• Helpdesk or IT support experience.
• Azure, AWS or security certifications.

Location: Remote (based in Kenya)

Working Hours: 1:00 PM–10:00 PM EAT. Flexibility outside these hours is required for deployments scheduled during low-traffic windows.

Contracting: If selected, you will be hired by Tana and embedded full-time with the client.

Before you apply: Please set aside 25–30 minutes to complete your application, including short written responses and two brief video answers. Have your CV ready and choose a quiet place where you can record. The application cannot be saved as a draft, so please complete and submit it in one sitting.

How to apply: Please apply through the application link below. We look forward to getting to know you!