ph3DevSecOps Engineer /h3pstrongAbout Leaf Space /strong /pppLeaf Space is a rapidly growingscale-up companyand aleading provider of ground segment as-a-service (GSaaS) solutions.
Our innovative and proprietary concept is focused on providing satellite and launch vehicle connectivity as-a-service, enabling clients to efficiently manage their assets and fully exploit data.
OurGSaaSsolutions have been recognized by the market for their efficiency, security, and effectiveness in supporting different applications, from remote sensing to IoT communications.
/p /ppstrongJOB OVERVIEW /strong /ppWe're building a satellite-based mesh network, and the software and infrastructure behind it — ground segment services, network orchestration, telemetry pipelines, and embedded flight/payload software tooling — need to be shipped fast and run securely.
As DevSecOps Engineer you will design, implement and continuously improve the CI/CD, cloud and infrastructure environment , contribute directly to software development across the stack, and build security into every stage rather than bolting it on at the end.
This is a hands-on role spanning development, operations, and security for systems that are both mission-critical and subject to strict regulatory obligations.
/ppstrongRESPONSIBILITIES /strong /pullipDesign, build, and maintain strongCI/CD pipelines /strong for ground-segment, network, and embedded software, with automated testing, security scanning, and controlled release gates.
/p /lilipContribute to automation tooling and software development supporting the platform and infrastructure.
/p /lilipCollaborate with embedded software teams to support build toolchains, cross-compilation and integration workflows.
/p /lilipManage cloud and on-prem infrastructure as code (Terraform, Ansible, or equivalent) with reproducible, auditable deployments.
/p /lilipOperate and secure strongcontainerized and orchestrated workloads /strong (Docker, Kubernetes),



including image hardening, registry scanning, and runtime security.
/p /lilipImplement observability — logging, metrics, tracing, and alerting — for reliable, debuggable production systems.
/p /lilipHarden systems and enforce access control, network segmentation, and least-privilege principles across environments.
/p /lilipSupport compliance and audit readiness against frameworks relevant to critical infrastructure (e.g., strongNIS2 /strong, ISO *****), contributing to policies, controls, and evidence.
/p /lilipContribute to incident response, patch management, and secure configuration baselines.
/p /lilipPartner with software, network, and mission teams /p /li /ulpstrongQUALIFICATIONS AND STUDIES /strong /pullipDegree in computer science, engineering, or equivalent practical experience.
/p /lilipRoughly 3–6 years in DevOps, SRE, platform, security, or software engineering roles.
/p /li /ulpstrongREQUIREMENTS /strong /pollipstrongTech skills /strong /p /li /olullipStrong Linux knowledge (required) — administration, networking, and development on Linux systems.
/p /lilipSolid software development skills, with experience writing production code (Python, Go, C/C++, Rust or similar).
/p /lilipFamiliarity with embedded software development environments is considered a plus.
/p /lilipStrong hands-on skills with strongCI/CD tooling /strong (GitLab CI, GitHub Actions, Jenkins, or similar) and stronginfrastructure as code /strong.
/p /lilipSolid networking and cloud fundamentals (AWS, GCP, or Azure).




/p /lilipPractical experience integrating security tooling into pipelines and a genuine security mindset.
/p /lilipClear communicator who can work across development, operations, and security.
/p /li /ulollipstrongSoft skills /strong /p /li /olullipExcellent cross-functional communication skills to interface effectively with engineering teams, suppliers and management.
/p /lilipAbility to translate ambiguous or evolving requirements into concrete, actionable specifications.
/p /lilipRigorous, detail-oriented approach, with a preference for measured/verified data over assumptions, and transparency when prior estimates need correction.
/p /lilipComfortable working in a fast-moving, still-maturing product environment, iterating on both architecture and hands-on implementation.
/p /lilipFluent English (written and spoken) required, given interaction with external international partners.
/p /li /ulpstrongWHAT WE OFFER /strong /pullipA flat and collaborative organizational structure /p /li /ulullipA fast?paced and professional environment within a rapidly growing space scale?up /p /li /ulullipChallenging projects with real impact on the global space ecosystem /p /li /ulullipAn international and diverse workplace /p /li /ulullipComprehensive benefits package, including a welfare platform, meal vouchers, a hybrid work policy supporting work-life balance, and training opportunities /p /li /ulpstrongCOMPENSATION TRANSPARENCY: /strong /pullipReports to: Head of Engineering /p /li /ulullipCareer level: P4 – Senior Professional /p /lilipJob location: Lomazzo (Como), Italy | Hybrid work model /p /li /ulullipSalary range: *****K /p /li /ulullipVariable compensation: 10% of annual gross salary /p /li /ulullipBenefits: Competitive benefits package, including a welfare platform and meal vouchers in Italy, with equivalent local benefits provided where applicable /p /li /ulullipExpected start date: /p /li /ul /p #J-*****-Ljbffr

📌 Senior Devsecops Engineer — Hybrid & Secure Cloud Ci/Cd (Milano)
🏢 Leaf Space
📍 Milano