DevOps Engineer at Opswat

OPSWAT, a global leader in IT, OT, and ICS critical infrastructure cybersecurity, delivers an end-to-end platform that gives public and private sector organizations and enterprises the critical advantage needed to protect their complex networks, secure their devices, and ensure compliance. Over the last 20 years our commitment to innovative technology has earned the trust of more than 1,700 organizations, governments, and institutions globally, solidifying our role in protecting the world’s critical infrastructure and securing our way of life. The Product: MetaDefender MFT MetaDefender MFT Enterprise is the next-generation evolution of OPSWAT's Managed File Transfer solution — a complete rearchitecture designed for scale, security, and the future. It is built to be: • A modern, scalable, and resilient platform capable of serving millions of users across enterprise and SaaS deployments. • A secure file exchange solution for both humans and systems, embedding OPSWAT's threat prevention technology — multiscanning, Deep CDR, and DLP — directly into every file flow. • A future-ready foundation that supports cloud-native SaaS delivery alongside traditional on-premise enterprise deployments. You will be one of the engineers building MFT Enterprise from the ground up — setting architecture patterns, defining quality standards, and shipping a platform trusted by governments and critical infrastructure operators worldwide. The Position At OPSWAT’s Technology Development Centre in Timisoara, we are looking for a talented DevOps Engineer to join our team working on one of our most strategic solutions: MetaDefender Secure Managed File Transfer (MFT). If you’re experienced in backend development, interested in cybersecurity, and excited to make real-world impact by protecting critical infrastructure, this is your opportunity! In Timisoara, in the heart of a peaceful, friendly, historic city, we have created a modern, inspiring office environment that encourages collaboration, where friendly, direct relationships between colleagues and high-quality professional work are equally important. Using modern, innovative technologies, we work on products that truly contribute to making our world safer at one of the world's leading cybersecurity companies. We support professional development through training, mentoring, and real opportunities for advancement. The Timisoara office offers the perfect balance of calm and professionalism – a modern environment, friendly people, and a strong team spirit. If you want to work in a place where your knowledge is valued and you are treated as a person, then OPSWAT Timisoara is the place for you. As a DevOps Engineer at OPSWAT, you own the on-premise infrastructure that the MFT and MFT Enterprise demo environments run on. You keep CI/CD pipelines green across both products, build the Kubernetes-based deployment foundation for MFT Enterprise, and ensure no critical infrastructure knowledge lives in a single person’s head. You use AI agents to automate repetitive ops work — scripting, config generation, runbook creation — so your leverage grows over time. You are measured by pipeline reliability, environment stability, and recovery speed, not ticket volume. You think in systems: you see how CI/CD, Kubernetes, security, and application delivery fit together — and you build for resilience, not just functionality. If you’re interested in working as a DevOps Engineer at OPSWAT, please apply, and we will get in touch! You Will Have The Opportunity to • Own CI/CD pipeline stability across MFT and MFT Enterprise — maintaining fast, reliable builds and deployments for both on-premise products. • Build and baseline the Kubernetes-based on-premise deployment environment for MFT Enterprise — establishing the containerised infrastructure foundation the product will ship and scale on. • Reduce single-resource dependency on infrastructure — document runbooks, cross-train teammates, and automate institutional knowledge so the team operates without critical bottlenecks. • Own infrastructure-related escalations reliably — diagnose incidents quickly, resolve with urgency, write post-mortems, and implement systemic fixes that prevent recurrence. • Use AI agents to automate infrastructure tasks — generating scripts, configuration, and runbooks — so repetitive ops work is delegated to agents and human effort focuses on judgment and architecture. • Author and maintain infrastructure-as-code and AI context files for every environment you own — treating infrastructure with the same rigour as application code, versioned, reviewed, and agent-readable. • Collaborate with the engineering team to define on-premise deployment patterns, environment standards, and infrastructure guardrails for MFT Enterprise — so the product ships on a stable, well-understood foundation. • Help troubleshoot infrastructure issues in customer environments — partnering with the support team to reproduce problems, identify root causes, and deliver fixes that improve environment reliability. • Act as the security gatekeeper for all infrastructure environments — enforcing secrets management practices, detecting and remediating leaked credentials, and ensuring access to CI/CD pipelines and deployment configurations follows least-privilege principles. What We Are Looking For  • AI-Native Fluency: Uses AI agents as core ops tools, not add-ons — generating scripts, configs, and runbooks through agents, and approaching infrastructure automation with an AI-native mindset. Must show real work where agents drove operational velocity. • CI/CD Expertise: 3+ years hands-on experience building and maintaining CI/CD pipelines (GitHub Actions, TeamCity, or equivalent) at production scale — diagnosing failures fast and shipping fixes without disrupting teams. • Kubernetes Proficiency: Hands-on experience deploying, configuring, and maintaining Kubernetes-based environments in on-premise contexts — comfortable with cluster management, workload configuration, and troubleshooting in staging and production. • Infrastructure as Code: 2+ years proficiency with IaC tools (Terraform, Ansible, Helm, or equivalent) — infrastructure is treated as versioned, reviewed code, not manual configuration. • Reliability Mindset: Proven ability to own and resolve infrastructure incidents under pressure — writes clear post-mortems, drives systemic improvements, and proactively reduces bus factor through documentation and cross-training. It Would Be Nice If You Had • Experience with cloud platforms: Exposure to AWS, Azure, or GCP — useful for CI/CD tooling and build infrastructure even where the product itself is on-premise. • Observability: Experience with monitoring, alerting, and tracing stacks (Prometheus, Grafana, ELK, or equivalent) — making failure visible before users notice it. • Security-hardened infrastructure: Applying security controls to infrastructure — network policies, secrets management, least-privilege access — in enterprise or compliance-driven environments. • AI in CI/CD: Running AI agents inside pipelines — auto-generating configs, validating infrastructure changes, or triggering remediation as pipeline steps. • Home lab or personal projects: A personal infrastructure project — self-hosted Kubernetes, home automation, or anything showing genuine curiosity and hands-on initiative outside of work. Why You'll Love Working Here • Work on a greenfield next generation platform — architecture decisions you make now will shape a product serving millions of users. • Stable, growing international company background with an exceptional customer group across 50+ countries. • Modern technology environment with active investment in AI-native engineering practices. • Professional development through training, mentoring, and real opportunities for advancement. • Romania: Timisoara office — modern environment, direct team culture, strong engineering community. • Hungary: Veszprém Technology Development Centre — collaborative office in a historic city, friendly direct relationships, regular team events. • Attractive compensation with regular performance assessments, and team activities. OPSWAT is an equal opportunity employer. We celebrate diversity and are committed to providing an environment where equal employment opportunities are extended to all employees and applicants, free of discrimination and harassment of any type. All employment decisions are based on individual qualifications, job requirements, and business needs without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other category protected by federal, state, or local laws. Recruiting Agencies: we do not accept unsolicited resumes from third party agencies for any of our open positions. To submit resumes for our jobs, there must be a recruiting contract approved by our legal team and endorsed by both parties. We are currently not accepting additional 3rd party agencies at this time.