DevSecOps Engineer

Valarian: A New Era of Sovereign Intelligence 

Valarian is a dual use technology company building critical tools to safeguard the future in an era of evolving global security challenges. Backed by a Series A funding round of $50m led by NEA, we are rethinking security beyond traditional military domains to address asymmetric threats that impact our technological advantage, economic strength, and democratic institutions. We provide the control infrastructure that allows government and regulated enterprise to put frontier-class AI to work safely.

We are bringing a frontier AI experience inside secure boundaries for the first time. Our technology supports mission critical workflows across government, healthcare, and enterprise, including:

• Scaling open-weight models without external inference endpoints.

• Putting frontier class AI to work across organisations through partnerships with other leading AI startups such as Perplexity. 

• Increasing operational resiliency for air gapped, on prem, and cloud based systems.

• Securing intellectual property and maintaining auditability for high stakes enterprise environments.

• Facilitating secure information flow during disaster response, M&A due diligence, and privileged legal communications.

We’ve only scratched the surface. Built in Britain by veterans of the Ministry of Defence, British Forces, Darktrace, and elite engineering backgrounds, we are driven by a shared mission to safeguard western democracy . Whether you join our London HQ or our wider global organisation, you’ll be part of a collaborative, high performing team creating the cutting edge software and infrastructure that defines the frontier of enterprise AI.

The Role

Join us as a DevSecOps Engineer and help us build the future of data sovereignty. We're seeking a DevSecOps Engineer passionate about creating high-performance, secure, scalable, and reliable services for our production infrastructure and security. You'll have a direct impact, improving existing systems and developing innovative solutions to complex challenges.

Our small, collaborative engineering teams own the full lifecycle of their services, from development to production operations. We champion automation and empower you to choose the best tools for the job. If you thrive in a fast-paced environment where you can make a real difference, we want to hear from you!

What you’ll do:

What we are looking for: 

• Proficiency with programming languages like Go, Bash, Python.

• Deep experience with Kubernetes security: RBAC, PodSecurityPolicies (or their replacements), Admission Controllers, and Kubernetes network policies.

• Proficiency in secure networking practices, including TLS, mutual TLS (mTLS), ingress/egress controls, and VPN tunneling configurations.

• Proven experience operating and securing service mesh technologies (e.g., Istio, Linkerd, or Consul Connect).

• Hands-on experience with HashiCorp Vault in production, including dynamic secrets engines, auth backends, and policy design.

• Practical knowledge of HAProxy or equivalent reverse proxies/load balancers, with experience configuring L4/L7 security protections.

• Familiarity with CVE triage workflows and integrating vulnerability scanners into CI/CD and registry workflows.

• Exposure to runtime security tooling (e.g., Falco, eBPF-based monitoring) and familiarity with basic incident response workflows.

• Comfort representing engineering in external calls with auditors, pentesters, and security vendors; able to explain infrastructure decisions in security terms.

Nice to have:

• Familiarity with compliance standards (SOC 2, ISO 27001, etc.) and cloud security postures in AWS, Azure, or GCP would be preferable but not essential.