Senior DevSecOps Engineer

Tasks & Responsibilities:

Infrastructure as Code (IaC):

• Manage infrastructure provisioning, scaling, and availability using IaC practices, with drift detection, policy-as-code enforcement, and tested disaster recovery runbooks (RTO/RPO).

Monitoring & Observability:

• Implement monitoring and observability solutions (metrics, logs, traces) aligned with Service Level Objectives (SLOs), ensuring application and infrastructure performance and health are tracked effectively.

Database Management & Migration:

• Manage existing and future database infrastructure used by internal systems.
• Upgrade databases to newer versions.
• Migrate databases to another engine (e.g., Oracle to PostgreSQL).
• Develop data warehouse databases and ETL processes to support Business Intelligence systems.

CI/CD & DevSecOps Pipelines:

• Develop, configure, and monitor DevSecOps pipelines using pipelines-as-code with integrated quality gates (linting, testing, security scanning, environment promotion), ensuring efficient and reliable CI/CD processes.
• Automate deployments with progressive delivery strategies (e.g., canary, blue/green) and feature flagging, incorporating automated rollback mechanisms to ensure reliable and repeatable releases.
• Deployments & System Operations: Manage deployment and setup of services and applications, ensuring they are configured correctly and optimized for the production environment.

Incident Management:

• Coordinate incident management through on-call rotations, incident playbooks/runbooks, and blameless post-incident reviews, ensuring production issues are resolved swiftly with lessons learned embedded.

Security & Supply Chain:

• Integrate security practices into CI/CD pipelines, including software supply-chain security (SBOMs, provenance checks), secrets management, and least-privilege access, while managing artifact repositories, image signing, and software supply-chain policies.

Internal Developer Platforms:

• Design and maintain internal developer platforms with golden paths, reusable templates, and policy-based guardrails, enabling teams to securely and consistently self-serve infrastructure and application environments.

FinOps & Cloud Optimization:

• Monitor, analyze, and optimize cloud costs by applying FinOps practices such as budgeting, forecasting, rightsizing, and implementing showback/chargeback models to maximize cost efficiency.

Documentation & GitOps:

• Document pipelines, processes, and infrastructure for reusability and knowledge transfer; implement GitOps for declarative cluster and application configuration management.
• Level 3 Support: In the context of Level 3 user support, investigate issues in the production environment by analyzing logs, database data, document repositories, and server infrastructures.

Specific Expertise & Technologies:

Minimum Required Level (Qualification Gate):

Education: University degree corresponding to Level 7 of the European Qualifications Framework (EQF Level 7, typically corresponding to a Master's level or 5 years of higher education), and a minimum of 15 years of IT professional experience.

Experience per Domain:

• Administration and management of Linux/Unix systems: 15 years
• Administration and management of database servers: 15 years
• ETL with relational databases (Oracle, PostgreSQL, MySQL, and Microsoft SQL Server): 15 years
• Monitoring and log management tools (Splunk, Dynatrace, Prometheus, etc.): 7 years
• Containerization (Docker and/or Podman): 5 years

Additional Expertise & Technologies

Architecture & Pipelines:

• Proven experience with System Design, enterprise-level multi-user Information Systems, and establishing/managing deployment pipelines and release management in an Agile work environment.

Cloud & Security:

• Good knowledge of cloud security architecture and security requirements.

Development & Scripting:

• Programming experience in languages such as PHP, Python, or Java.
• Fundamentals of front-end languages (CSS3+, JavaScript) and scripting (sh, bash, ksh, Ansible, Perl).

Application Servers & Databases:

• In-depth knowledge and experience with Apache Tomcat application server management.
• Experience with NoSQL databases (e.g., MongoDB).
• In-depth knowledge of schema design, query optimization, and ETL processes.
• Containers & Orchestration: In-depth knowledge of containerization and orchestration technologies such as Docker, Podman, and Kubernetes for cloud deployments.

Interoperability & Messaging: RESTful APIs, SOAP, Apache Kafka message queues, and JSON data formats.

Tools & Version Control: Version control systems like GIT (GitFlow or trunk-based workflows) using Atlassian Bitbucket, and build tools like Maven, Gradle, and Atlassian Bamboo.

Networking & Protocols: DNS, Load Balancing, Firewalls, VPNs, basic network troubleshooting, Kerberos, LDAP, HTTPD, OpenSSL, NFS, ZFS, RSYNC, and SFTP.

Certificates (Optional)

• One of the following or an equivalent certification is considered an asset:
• AWS Certified DevOps Engineer - Professional
• Microsoft Azure DevOps Engineer Expert
• Docker Certified Associate
• Certified Kubernetes Administrator (CKA) / Application Developer (CKAD)
• HashiCorp Terraform Associate
• DevSecOps Engineering (DSOE)