About OffSec

Founded in 2006 by the creators of Kali Linux, OffSec (formerly known as Offensive Security) is the leading provider of continuous professional and workforce development, training, and education for cybersecurity practitioners. OffSec’s distinct pedagogy and practical, hands-on learning help organizations fill the infosec talent gap by training their teams on today’s most critical skills.

Become a part of our global presence and work from anywhere. With team members in over 40 countries, we believe in inspiring people of all backgrounds and communities. The OffSec team is composed of diverse, internationally published authors, conference speakers, and seasoned information technology professionals from both the private sector and governments worldwide.

Excited about our mission and what we do? Apply and join us!

About the Job

OffSec is seeking an experienced DevOps Engineer to join our team and lead the design and implementation of complex, scalable lab environments that power our industry-leading cybersecurity training and certification programs. This senior-level position will work closely with Security Researchers and Platform Engineers to create sophisticated labs and vulnerable machine environments across hybrid cloud and on-premises infrastructure, enabling hands-on learning experiences for cybersecurity professionals worldwide.

The ideal candidate will bring deep expertise in OpenStack, modern DevOps practices, and the integration of generative AI to automate infrastructure management, with proven experience in large-scale migrations and cost optimization. You’ll design resilient, scalable, and secure infrastructure – leveraging AI-driven insights and prompt engineering – to deploy lab environments supporting thousands of concurrent users while maintaining the realistic attack scenarios our students depend on.

Duties and responsibilities

Infrastructure & Migration
Design and Engineer complex, multi-tier deployment environments for labs supporting vulnerable machines and realistic attack scenarios using OpenStack

Develop scalable infrastructure solutions across hybrid cloud and on-premises environments

Create solutions that reduce infrastructure costs while improving capabilities and performance

Design secure hosting networks and network topologies that can be used to support realistic offensive cyber activities.

Establish infrastructure standards, patterns, and best practices for lab environment deployment

Lab Environment Specialization
Design deployment pipelines for complex, multi-VM cybersecurity lab environments with sub-5 minute deployment targets

Implement static IP addressing and network isolation for thousands of concurrent user lab instances

Optimize lab deployment speed and resource utilization for peak performance

Create infrastructure supporting the deployment of concurrent vulnerable machine instances at scale

Design workspace-based deployment models enabling team collaboration and private lab sessions

Platform Engineering & Automation
Design and implement CI/CD pipelines using GitLab for automated deployment of lab environments

Develop infrastructure automation using known Infrastructure as Code frameworks

Create self-service capabilities for Content Engineers to deploy and manage lab resources efficiently

Implement comprehensive monitoring, logging, and observability solutions for lab environments

Establish disaster recovery and business continuity procedures with minimal downtime requirements

Cloud & Virtualization Management
Engineer and optimize OpenStack deployments as primary infrastructure platform

Implement multi-cloud strategies across AWS, Azure, and GCP where appropriate

Execute cloud cost optimization strategies and resource governance policies

Ensure security and compliance across all cloud and virtualization platforms

Design and implement efficient backup and snapshot strategies for lab environments

Network Engineer & Security
Design complex networks including VPNs, VLANs, and software-defined networking

Implement network segmentation and security controls appropriate for vulnerable lab environments

Configure and manage load balancers, firewalls, and network security appliances

Design network monitoring and traffic analysis capabilities

Ensure proper isolation between student lab environments while maintaining performance

Qualifications

Technical Expertise

AI: Proficiency in leveraging generative AI tools and prompt engineering to optimize workflows, enhance creative output, and drive operational efficiency.

OpenStack: Production experience with OpenStack deployment, management, and optimization

Cloud Platforms:3+ years hands-on experience with AWS, Azure, and Google Cloud Platform

Virtualization: Expert-level knowledge of OpenStack

Networking: Deep understanding of TCP/IP, routing protocols, VPNs, firewalls, and network security

CI/CD: Extensive experience with GitLab CI/CD pipelines and infrastructure automation

Infrastructure as Code: Proficiency with any framework like Terraform, CloudFormation, ARM templates, and configuration management tools

Containerization: Experience with Docker, Kubernetes or other container orchestration

Operating Systems: Advanced knowledge of Linux and Windows Active Directory

Professional Experience
3+ years of experience in DevOps, Site Reliability Engineering, or Infrastructure Engineer roles

Proven track record of designing and implementing large-scale, distributed systems

Demonstrated experience with infrastructure cost optimization and migration projects

Experience with high-availability and disaster recovery implementations

Background in cybersecurity, penetration testing, or vulnerability research environments (preferred but not a requirement)

Strategic & Analytical Skills
Proactive problem-solving with ability to understand broader context and implications

Experience identifying and proposing solutions before being asked

Ability to challenge requirements and suggest alternative approaches

Track record of improving processes and identifying optimization opportunities

Experience making Engineer decisions with incomplete information

Performance Expectations
Ability to work independently with minimal supervision while maintaining high quality standards

Track record of successful large-scale infrastructure projects delivered on time

Preferred Qualifications

Experience with cybersecurity tools and vulnerable application deployment

Experience with monitoring tools like Prometheus, Grafana, ELK stack

Familiarity with Offensive Security’s training platforms and methodologies

Open source contributions or technical writing experience

Working conditions

This role is a full-time position. Work hours for this position are flexible and will be performed from a home office.

Direct reports

This position has no direct reports.

OffSec provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Offsec