DevSecOps Engineer

ulliDevelop, configure, and monitor DevSecOps pipelines using pipelines-as-code with integrated quality gates (linting, testing, security scanning, environment promotion), ensuring efficient and reliable CI/CD processes. /liliAutomate deployments with progressive delivery strategies (e.g., canary, blue/green) and feature flagging, incorporating automated rollback mechanisms to ensure reliable and repeatable releases. /liliManage deployment and setup of services and applications, ensuring they are configured correctly and optimized for the production environment. /liliManage infrastructure provisioning, scaling, and availability using Infrastructure-as-Code (IaC) practices, with drift detection, policy-as-code enforcement, and tested disaster recovery runbooks (RTO/RPO). /liliImplement monitoring and observability solutions (metrics, logs, traces) aligned with service level objectives (SLOs), ensuring application and infrastructure performance and health are tracked effectively. /liliCoordinate incident management through on-call rotations, incident playbooks/runbooks, and blameless post-incident reviews, ensuring production issues are resolved swiftly with lessons learned embedded. /liliPerform performance tuning of both applications and infrastructure to ensure optimal usage of resources and user experience. /liliIntegrate security practices into CI/CD pipelines, including software supply-chain security (SBOMs, provenance checks), secrets management, and least-privilege access, to maintain secure system configurations. /liliDesign and maintain internal developer platforms with golden paths, reusable templates, and policy-based guardrails, enabling teams to securely and consistently self-serve infrastructure and application environments. /liliPlan and implement upgrades and migrations of software stack. /liliMonitor, analyse, and optimise cloud costs by applying FinOps practices such as budgeting, forecasting, rightsizing, and implementing showback/chargeback models to maximise cost efficiency. /liliDocument pipelines, processes, and infrastructure for reusability and knowledge transfer. /liliImplement GitOps for declarative cluster and application configuration management. /liliEstablish artifact repositories and image signing; enforce software supply-chain policies and integrity checks. /li /ulpbSpecific Expertise and Technologies /b /pulliProven experience with Docker, Kubernetes, Terraform, Ansible, HashiCorp Vault, Linux. /liliProven experience with DevSecOps lifecycle tools (GitLab, Atlassian, GitHub). /liliProven experience with static code analysis (SonarQube, Fortify, Snyk, etc.). /liliProven experience with black box and white box testing (OWASP, HP Fortify, etc.). /liliProven experience with repository management tools (Nexus etc.). /liliProven experience with monitoring tools (Dynatrace, Splunk, Prometheus etc.). /liliProven experience with internal developer platforms (Backstage, Humanitec etc.). /liliProven experience with development languages (Python, YAML, Bash, PowerShell, Ruby, or Perl). /liliProven experience with cloud platforms (AWS, Azure, OVH etc.). /liliProven experience with Infrastructure-as-Code (Terraform, CloudFormation, CDK, Bicep, ARM). /liliProven experience with System Design and Architecture. /liliExperience with large, enterprise-level multi-user Information Systems. /liliGood knowledge in establishing and managing deployment pipelines and release management. /liliGood knowledge in conducting DevSecOps in an Agile work environment. /liliGood knowledge in cloud security architecture and security requirements. /liliGood knowledge of continuous delivery and Application Lifecycle Management tools (JIRA, Git, Bamboo, Nexus, etc.). /liliGood knowledge of secret management tools (CyberArk, HashiCorp etc.). /liliGood knowledge of network fundamentals (DNS, Load Balancing, Firewalls, VPNs, basic network troubleshooting, etc.). /liliCI options such as GitHub Actions, GitLab CI, Jenkins; and GitOps controllers like Argo CD and Flux. /liliSupply-chain tooling (e.g., SBOM generation/signing, SLSA) and policy agents (e.g., OPA, Kyverno). /li /ulpbMinimum Level of Expertise /b /pulliNormal /li /ulpbCertification and/or Standards /b /ppbMandatory: /b One of the following certifications (or equivalent): /pulliDocker Certified Associate /liliHashiCorp Terraform Associate /li /ulpbSkills /b /pulliRapid self-starting capability and experience in team working. /liliExcellent interpersonal and communication skills. /liliAbility to participate in multi-lingual meetings, ease of communication. /liliAbility in applying security and cloud best practices. /liliAutomation skills to optimize and understand DevSecOps pipelines. /liliAbility to understand, speak, and write English; French is considered an additional asset. /liliAbility to work in a team as well as autonomously. /liliResults-oriented mindset, focused on delivering. /li /ul