01 / The opportunity
Architecture with your
hands on the tools.
Implement technical security controls across APIs, cloud infrastructure, CI/CD, identity and platform operations. Help make SmartAvatar systems secure, auditable and aligned with modern European security and compliance expectations.
You will translate SmartAvatar's security architecture into practical technical controls across APIs, cloud infrastructure, CI/CD, identity, logging and platform operations. Your work will help ensure that SmartAvatar systems are secure, auditable and policy-aligned, supporting European expectations including GDPR and emerging AI regulation. You will work closely with our security leadership, architecture lead, backend, DevOps and QA engineers to implement, validate and continuously improve security controls across the platform. This is a full-time, on-site position based in Gazipur, Bangladesh, suited to an engineer with experience in application security, cloud security, identity and access management or secure platform engineering.
02 / Your contribution
What you will own
- Implement OAuth2/OIDC and secure identity and authentication patterns
- Implement and maintain RBAC and ABAC access-control mechanisms
- Manage secrets and support secure service-to-service communication
- Support PKI, certificates, mTLS and secure API patterns
- Automate security checks within CI/CD pipelines
- Perform vulnerability scanning and dependency security checks
- Support container and cloud infrastructure hardening
- Implement and maintain security logging and audit trails
- Support incident-response readiness and security monitoring
- Work with QA teams on security validation, testing and evidence collection
- Collaborate with security leadership, architecture, backend and DevOps teams
03 / Your experience
What you bring
The experience and capabilities we are looking for.
- Around 3 years or more of experience in application security, cloud security, IAM or platform engineering
- Strong working knowledge of Linux
- Hands-on experience with containers and containerised environments
- Understanding of authentication, authorisation and identity-management concepts
- Knowledge of OWASP security principles and common application-security risks
- Familiarity with SAST and DAST security testing
- Understanding of Software Bills of Materials (SBOMs)
- Knowledge of the secure software development lifecycle
- Strong technical documentation skills
- Ability to communicate technical security risks clearly
- Good written and spoken English
Useful additional experience
These skills are welcome, but are not essential requirements.
- Experience implementing Zero Trust security principles
- Experience with PKI and certificate management
- Experience with Kubernetes security
- Experience with industrial or operational-technology security
- Familiarity with OAuth2, OpenID Connect, RBAC and ABAC implementations
- Experience with cloud security and infrastructure hardening
- Familiarity with security automation in CI/CD environments
- Understanding of GDPR and security requirements relevant to European technology platforms
04 / Working with us
What we offer
- Competitive compensation based on experience
- Full-time role in a growing deep-tech company
- Opportunity to work on security across Digital Twin, AI, cloud and distributed systems
- Hands-on involvement in application, platform and infrastructure security
- Collaboration with security, architecture, backend, DevOps and QA specialists
- Exposure to international projects, partners and European technology ecosystems
- Opportunity to work with modern identity, cloud and secure software-development technologies
- Professional growth through practical security engineering and cross-functional collaboration
- On-site work environment in Gazipur, Bangladesh