DevSecOps Engineer

pThe tasks that service provider will be expected to perform include any or all of the following. /p ul liDevelop, configure, and monitor DevSecOps pipelines using pipelines-as-code with integrated quality gates (linting, testing, security scanning, environment promotion), ensuring efficient and reliable CI/CD processes. /li liAutomate deployments with progressive delivery strategies (e.g., canary, blue/green) and feature flagging, incorporating automated rollback mechanisms to ensure reliable and repeatable releases. /li liManage deployment and setup of services and applications, ensuring they are configured correctly and optimized for the production environment. /li liManage infrastructure provisioning, scaling, and availability using Infrastructure-as-Code (IaC) practices, with drift detection, policy-as-code enforcement, and tested disaster recovery runbooks (RTO/RPO). /li liImplement monitoring and observability solutions (metrics, logs, traces) aligned with service level objectives (SLOs), ensuring application and infrastructure performance and health are tracked effectively. /li liCoordinate incident management through on-call rotations, incident playbooks/runbooks, and blameless post-incident reviews, ensuring production issues are resolved swiftly with lessons learned embedded. /li liPerform performance tuning of both applications and infrastructure to ensure optimal usage of resources and user experience. /li liIntegrate security practices into CI/CD pipelines, including software supply‑chain security (SBOMs, provenance checks), secrets management, and least‑privilege access, to maintain secure system configurations. /li liDesign and maintain internal developer platforms with golden paths, reusable templates, and policy‑based guardrails, enabling teams to securely and consistently self‑serve infrastructure and application environments. /li liPlan and implement upgrades and migrations of software stack. /li liMonitor, analyze, and optimize cloud costs by applying FinOps practices such as budgeting, forecasting, rightsizing, and implementing show back/chargeback models to maximize cost efficiency. /li liDocument pipelines, processes, and infrastructure for reusability and knowledge transfer. /li liEstablish artifact repositories and image signing; enforce software supply‑chain policies and integrity checks. /li liDesign and implement cloud solutions that meet business objectives, with defined operational Key Performance Indicators (KPIs) for availability, reliability, and performance, and clear ownership boundaries. /li liManage and optimize cloud infrastructure and operations against defined Key Performance Indicators (KPIs) for cost, performance, and availability, adhering to operational excellence best practices. /li liConduct cost analysis and monitor cloud expenses using Financial Operations (FinOps) practices, including budgeting, forecasting, rightsizing, and implementing showback/chargeback models. /li liEnsure security, compliance, and data protection through the implementation of the shared responsibility model, zero‑trust principles, encryption, and adherence to relevant compliance frameworks (e.g., General Data Protection Regulation (GDPR)). /li liAutomate cloud processes and workflows using scripting and tools. /li liTroubleshoot and resolve cloud‑related issues to maintain service levels and meet defined operational Key Performance Indicators (KPIs) for availability and reliability. /li liCollaborate with development teams to support cloud‑based applications. /li liEvaluate and recommend new cloud services and technologies to enhance capabilities, improve efficiency, and reduce costs while aligning with architectural standards. /li liCreate and maintain comprehensive documentation for cloud systems, architectures, and operational processes to ensure knowledge sharing and operational continuity. /li liManage the end‑to‑end cloud architecture, development, and migration lifecycle, including strategy definition, landing zone design, networking, data migration planning, and execution via detailed runbooks. /li liProvide cloud expertise and support to stakeholders and teams. /li liEstablish cloud landing zones with governance guardrails (e.g., policies, tagging, Role-Based Access Control (RBAC)) and a well‑defined environment hierarchy to ensure security and compliance. /li liImplement comprehensive observability (monitoring, logging, tracing), incident response processes, and disaster recovery/business continuity plans (DR/BCP) with defined Recovery Time and Point Objectives (RTO/RPO). /li /ul h3Job requirements /h3 h3Minimum level of qualification /h3 pUniversity degree corresponding to Level 7 of the European Qualifications Framework (which typically corresponds to a master’s level or 5 years of higher education), and minimum 15 years of IT professional experience. or University degree corresponding to Level 6 of the European Qualifications Framework (which typically corresponds to a ba