The world of global advisory, audit and tax compliance services for large multi-nationals is rapidly changing and heavily dependent on technology.    

The KPMG Delivery Network (KDN) is a KPMG special purpose member firm offering a way for clients to leverage KPMG top talent and technology platforms through regional teams of specialists, enabling economies of scale and a new way of working that expands beyond local capability

As a member of KDN, you’ll be a part of the KPMG family working alongside some of our profession’s most skilled practitioners on rewarding programs and initiatives that are changing the way business operates, delivering value to our clients, and driving positive change in the communities we serve.

You’ll be enabling KDN accelerate new ways of working, using cutting-edge technology and working together with our member firms located in nearly 150 countries to help us achieve our ambition to be the most trusted and trustworthy professional services firm. 

And through your work, you’ll build a global network and unlock opportunities that you may not have thought possible with access to great support, vast resources, and an inclusive, supportive environment to help you reach your full potential.

Our KDN Bulgaria Cloud unit is focused on designing, building, securing and managing cloud native and hybrid platforms for the KPMG group of member firms, as well as providing cloud advisory and engineering services to external clients.

The DevOps Engineer – Illumio Security is responsible for the engineering, deployment, automation, integration and operational support of Illumio security technologies. The role particularly focuses on Illumio Insights, micro-segmentation, attack-surface visibility, threat detection and policy enforcement across hybrid and multi-cloud environments.

• Lead the deployment, configuration, upgrade and operational support of Illumio platforms.
• Design, implement and maintain micro-segmentation policies across cloud, on-premises and hybrid environments.
• Optimise platform performance, visibility and policy effectiveness while maintaining operational stability.
• Develop and maintain advanced use cases using Illumio Insights for attack-path analysis and threat detection.
• Integrate Illumio Insights telemetry with SIEM, SOAR and security-monitoring platforms.
• Collaborate with Detection Engineering teams to improve visibility into lateral movement and attack progression.
• Build automation capabilities that streamline security operations and policy management.
• Develop and maintain Infrastructure as Code and security-as-code capabilities supporting Illumio deployments.
• Create SOAR playbooks and automated workflows that reduce manual effort and accelerate security response.
• Integrate Illumio with SIEM, SOAR, CMDB, EDR, cloud security and vulnerability-management platforms.
• Develop APIs, scripts and automation services that enable secure integration, data sharing and orchestration.
• Support enterprise security architecture initiatives involving segmentation and Zero Trust controls.
• Provide Level 3 technical support for Illumio-related incidents and service requests.
• Conduct root-cause analysis and implement corrective actions for recurring technical issues.
• Produce operational reports and security metrics covering segmentation, policy compliance and platform effectiveness.

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Technology, Engineering or a related technical field, or equivalent practical experience.
• 5+ years of experience in cybersecurity engineering, security operations or security platform engineering.
• Proven hands-on experience implementing and supporting Illumio security technologies in enterprise environments.
• Advanced knowledge of Illumio Core, Illumio Insights and attack-path visibility capabilities.
• Experience designing and managing micro-segmentation strategies and Zero Trust security controls.
• Strong understanding of cloud platforms, with Google Cloud Platform preferred, as well as experience with Microsoft Azure and AWS.
• Experience integrating security platforms with SIEM, SOAR, EDR, CMDB and cloud-native security technologies.
• Knowledge of security operations, detection engineering, incident response and threat-hunting methodologies.
• Experience developing SOAR automation, orchestration workflows and response playbooks.
• Proficiency in Python, PowerShell, Terraform, REST APIs and automation frameworks.
• Experience with Microsoft Sentinel, Google Security Operations, Splunk or a comparable SIEM platform.
• Strong understanding of network security, Zero Trust Architecture, identity security and attack-path analysis.
• Experience with Infrastructure as Code using Terraform, CloudFormation or equivalent technologies.
• Excellent communication skills in English. 

• The chance to work in a top talent team
• Attractive remuneration
• Build knowledge in cutting-edge technologies
• Opportunity for continuous training, learning and certification
• Experience in an international and multicultural organization
• Work on challenging projects with clients in various industries around the globe
• Modern office environment
• Additional health insurance
• Life insurance
• 50+ benefits and services to choose from
• Hybrid working policy

KPMG Delivery Network Bulgaria is committed to building a diverse, equitable and truly inclusive company. We actively encourage diversity and inclusion, while opposing all forms of unlawful and unfair discrimination on the grounds of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex and sexual orientation. Join us, and let us write your next chapter together!

© 2026 KPMG Delivery Network Ltd., a member firm of the KPMG global organization of independent member firms affiliated with KPMG International Limited, a private English company limited by guarantee. All rights reserved. The KPMG name and logo are registered trademarks or trademarks of KPMG International.