DevOps 专家

About us

What you'll do

• As a core member of the platform engineering team, I will be responsible for building, evolving, and maintaining the next‑generation infrastructure and built‑in developer platform (IDP) that supports the entire business line of the company. I will also integrate security as the first‑class citizen (First‑Class Citizen) deeply into the platform.
• Platformization of security toolchain: I will be responsible for integrating tools such as SAST, DAST, SCA, infrastructure as code (IaC) security scanning, etc. into the CI/CD automated pipeline and abstracting them into platform functions that developers can use out of the box, promoting "security leftward shift".
• Design of cloud‑native security architecture: I will be responsible for designing and implementing security boundaries such as Kubernetes platform, service mesh (Service Mesh), network isolation, identity authentication, and minimal permissions (RBAC) in multi‑cloud environments.
• Construction of software supply chain security: I will be responsible for building a full‑chain software supply chain security system covering code sources, third‑party dependencies, artifact repositories (Harbor/Nexus), and image signatures (such as the implementation of the SLSA framework).
• Automation of compliance and auditing: I will use policy as code (Policy as Code, such as OPA/Kyverno) to achieve automatic compliance checks in the cloud‑native environment, converting security compliance into the underlying guardrail of the development platform.
• Emergency response and vulnerability management: I will cooperate with the security team to conduct automated investigations, blocking, and one‑click repair of major security vulnerabilities (such as zero‑day vulnerabilities) on the platform, reducing the convergence cycle of platform vulnerabilities.

What you'll need

Core technical background

• Bachelor's degree or above in computer science or related field, with at least 5 years of experience in DevOps, SRE or platform engineering development.
• Proficient in at least one mainstream programming language (such as Go / Python / Java), and possess excellent skills in platform tools and API development.
• In‑depth understanding of Kubernetes architecture and ecosystem, with 3 years or more of experience in large‑scale K8s cluster operation or secondary development in production environments.
• Proficient in the architecture design and advanced pipeline orchestration of mainstream CI/CD tools (such as GitLab CI, GitHub Actions, ArgoCD).

Security knowledge and awareness (key points)

• Deep understanding of DevSecOps and security left‑shift: Not only able to use security tools, but also able to think from the "platform engineering" perspective on how to reduce the friction of security tools on development efficiency and improve developer experience (Developer Experience).
• Software supply chain security experience: Familiar with container image security scanning, SBOM (Software Bill of Materials) management, and practical experience in implementing product signatures and verification (such as Cosign/Notary) in production environments.
• Cognitive of Policy as Code: Familiar with OPA (Open Policy Agent), Kyverno or Rego language, and able to write and implement K8s admission control policies or IaC (Terraform/OpenTofu) static security check rules.
• Cloud‑native security matrix: Familiar with K8s 4C security model (Cloud, Cluster, Container, Code), and deeply understand multi‑tenant isolation, network policies (NetworkPolicy), confidential information management (Vault/Sealed Secrets), and runtime security (Falco).
• Familiarity with compliance standards: Understand industry mainstream security and compliance standards such as ISO 27001, etc., and have experience in converting them into automated technical inspection points.

Bonus points

• Those with well‑known security certifications will be given priority, such as CKS (Certified Kubernetes Security Specialist), CISSP, CCSP, etc.
• Those who have successfully implemented the DevSecOps system from scratch within an enterprise or have led the construction of a security platform will be given priority.
• Active contributors to the open‑source community (especially in CNCF security‑related projects or platform engineering ecosystems).

岗位职责：

• 作为平台工程团队的核心成员，将负责构建、演进和维护支撑公司全业务线的下一代基础设施与内建开发者平台（IDP），并将安全性作为平台的第一公民（First‑Class Citizen）深度融合。
• 安全工具链平台化： 负责将 SAST、DAST、SCA、基础设施即代码（IaC）安全扫描等工具集成到 CI/CD 自动化流水线中，并将其抽象为开发者开箱即用的平台功能，推动“安全左移”。
• 云原生安全架构设计： 负责 Kubernetes 平台、服务网格（Service Mesh）以及多云环境下的网络隔离、身份认证、权限最小化（RBAC）等安全边界的设计与落地。
• 软件供应链安全构建： 负责构建覆盖代码源头、第三方依赖、制品库（Harbor/Nexus）、镜像签名的全链路软件供应链安全体系（如 SLSA 框架落地）。
• 自动化合规与审计： 利用策略即代码（Policy as Code，如 OPA/Kyverno）实现云原生环境下的合规性自动检查，将安全合规转化为研发平台的底层护栏。
• 应急响应与漏洞治理： 配合安全团队进行重大安全漏洞（如零日漏洞）的自动化排查、阻断与平台级一键修复，降低平台漏洞收敛周期。

任职要求：

核心技术背景

• 计算机或相关专业本科及以上学历，5 年以上 DevOps、SRE 或平台工程开发经验。
• 熟练掌握至少一门主流开发语言（如 Go / Python / Java），具备优秀的平台工具和 API 开发能力。
• 深入理解 Kubernetes 架构及生态，具备 3 年以上生产环境的大规模 K8s 集群运维或二次开发经验。
• 精通主流 CI/CD 工具（如 GitLab CI, GitHub Actions, ArgoCD）的架构设计与高级流水线编排。

安全知识与认知（重点）

• 深度理解 DevSecOps 与安全左移： 不仅会使用安全工具，更能从“平台工程”视角出发，思考如何降低安全工具对研发效率的摩擦，提升开发者体验（Developer Experience）。
• 软件供应链安全经验： 熟悉容器镜像安全扫描、SBOM（软件物料清单）管理，有生产环境落地制品签名与验签（如 Cosign/Notary）的实际经验。
• 策略即代码（Policy as Code）认知： 熟悉 OPA (Open Policy Agent)、Kyverno 或 Rego 语言，能够编写并实施 K8s 准入控制策略或 IaC（Terraform/OpenTofu）静态安全检查规则。
• 云原生安全矩阵： 熟悉 K8s 4C 安全模型（Cloud, Cluster, Container, Code），深入理解多租户隔离、网络策略（NetworkPolicy）、机密信息管理（Vault/Sealed Secrets）及运行时安全（Falco）。
• 熟悉合规标准： 了解 ISO 27001、等保 2.0、CIS Benchmarks 等业界主流安全与合规标准，并有将其转化为自动化技术检查点的经验。

加分项

• 拥有知名安全证书者优先，如 CKS (Certified Kubernetes Security Specialist)、CISSP、CCSP 等。
• 有在企业内部成功从 0 到 1 推动 DevSecOps 体系落地，或主导过安全平台化建设经验者优先。
• 活跃的开源社区贡献者（特别是在 CNCF 安全相关项目或平台工程生态中）。

Why Bitget?

• Bitget is the world's leading web 3 platform for copy trading and one of the world's largest and most respected exchanges.
• We are a global company with staff members from over 50 different countries and regions.
• We are growing and looking for world‑class ambitious talents to help us continue this journey.
• We have a streamlined structure that empowers employees to work efficiently, delivering the best results in a short timeframe.
• We offer competitive salaries and benefits.
• Blockchain technology and digital assets have the potential to change finance in a way no other technology can – be part of it!