What you will do
- Design, develop, configure, and maintain automated DevSecOps pipelines using Pipeline-as-Code practices.
- Integrate quality gates into CI/CD pipelines, including code linting, automated testing, security scanning, and environment promotion.
- Implement progressive delivery strategies such as Canary and Blue-Green deployments, feature flagging, and automated rollback mechanisms.
- Manage application deployment, configuration, release management, and production environment optimization.
- Automate infrastructure provisioning, scaling, and availability using Infrastructure as Code (IaC).
- Implement infrastructure drift detection, Policy-as-Code enforcement, and disaster recovery runbooks with defined Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO).
- Establish monitoring and observability solutions using metrics, logs, and distributed traces, aligned with Service Level Objectives (SLOs).
- Coordinate production incident management through on-call rotations, incident playbooks, runbooks, and blameless post-incident reviews.
- Perform application and infrastructure performance tuning to improve resource utilization, system reliability, and user experience.
- Integrate security practices into CI/CD pipelines, including software supply-chain security, SBOM generation, provenance checks, secrets management, and least-privilege access.
- Design and maintain Internal Developer Platforms (IDPs) with reusable templates, golden paths, and policy-based guardrails.
- Plan and execute software stack upgrades, migrations, and infrastructure improvements.
- Monitor and optimize cloud expenditure using FinOps practices, including budgeting, forecasting, rightsizing, and showback/chargeback models.
- Implement GitOps for declarative management of application and Kubernetes cluster configurations.
- Establish artifact repositories, image signing, and software integrity validation processes.
What you bring
- Knowledge of static code analysis and security scanning tools such as SonarQube, Fortify, and Snyk.
- Experience with black-box and white-box testing methodologies and application security tools, including OWASP and HP Fortify.
- Familiarity with repository and artifact management tools such as Nexus.
- Experience with monitoring and observability platforms, including Dynatrace, Splunk, and Prometheus.
- Knowledge of Internal Developer Platforms such as Backstage and Humanitec.
- Proficiency in scripting and development languages such as Python, YAML, Bash, PowerShell, Ruby, or Perl.
- Experience with cloud platforms such as AWS, Microsoft Azure, and OVH.
- Strong understanding of system design, architecture, and enterprise-level multi-user information systems.
- Good knowledge of deployment pipelines, release management, continuous delivery, and Application Lifecycle Management (ALM).
- Experience implementing DevSecOps practices in Agile environments.
- Understanding of cloud security architecture and security requirements.
- Knowledge of secrets management solutions such as HashiCorp Vault and CyberArk.
- Strong understanding of network fundamentals, including DNS, load balancing, firewalls, VPNs, and network troubleshooting.
- Familiarity with GitOps controllers such as Argo CD and Flux.
- Knowledge of software supply-chain security, including SBOM generation, signing, SLSA, and policy enforcement tools such as OPA and Kyverno.
- Experience working with Linux environments.
How you work
- Quickly understand complex technical environments and independently take ownership of DevSecOps activities.
- Design, automate, and optimize CI/CD pipelines to improve deployment speed, reliability, and security.
- Apply cloud security and infrastructure best practices across development and production environments.
- Identify and resolve pipeline, deployment, infrastructure, and production issues.
- Implement automation to reduce manual effort and improve operational efficiency.
- Collaborate effectively with developers, infrastructure engineers, security teams, and other stakeholders.
- Communicate technical information clearly and participate effectively in multilingual meetings.
- Work independently while contributing positively to cross-functional teams.
- Demonstrate strong analytical, troubleshooting, and problem-solving capabilities.
- Maintain a results-oriented mindset with a strong focus on delivery, continuous improvement, and secure engineering practices.
What you can expect
- Opportunities to work on enterprise-level DevSecOps and cloud transformation initiatives.
- Exposure to modern technologies across Kubernetes, cloud platforms, automation, GitOps, and Infrastructure as Code.
- Opportunities to build and improve developer platforms and automated software delivery environments.
- Experience implementing advanced security practices and software supply-chain protection.