This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We are seeking a highly motivated and experienced DevOps Engineer to join our team and champion a DevSecOps culture. This role will be focused on designing, building, and maintaining our CI/CD pipelines, with a specific focus on secure Java application builds, branching strategies, and automated deployments. The ideal candidate will be proficient in scripting (Python, Bash, and Groovy), have a strong understanding of Jenkins pipeline development, including the use of shared libraries, infrastructure as code, modern DevOps practices, and a security-first mindset. Additionally, a solid understanding of QA automation testing tools is beneficial, and proficiency with Selenium is considered an added advantage. You will play a critical role in enabling our development and QA teams to deliver high-quality, secure software rapidly and reliably.
Job Responsibility:
Secure CI/CD Pipeline Development: Design, implement, and maintain robust, automated, and secure CI/CD pipelines using Jenkins and other relevant tools. This includes integrating security scanning and testing tools into the pipeline
Secure Java Build Expertise: Optimize and troubleshoot Java application builds, ensuring security best practices (including dependency management, vulnerability scanning), artifact repository management (Nexus, Artifactory) and build performance
Secure Branching Strategy Management: Implement and maintain effective and secure branching strategies (e.g., Gitflow, Trunk-Based Development), ensuring secure collaboration between development teams and preventing unauthorized code merges
Infrastructure as Code (IaC) with Security: Leverage IaC tools (e.g., Terraform, CloudFormation, Ansible) to automate secure infrastructure provisioning, configuration, and management for our CI/CD environment. This includes implementing security policies and access controls in code
Secure Jenkins Pipeline Development with Groovy: Develop complex, efficient, maintainable, and secure Jenkins pipelines using Groovy scripting, that integrate testing, security code quality checks, and automated deployments. This includes the use of shared libraries for reusable pipeline logic
Shared Library Development: Develop and maintain reusable Jenkins shared libraries using Groovy to encapsulate common CI/CD logic, promoting consistency and maintainability across pipelines
Scripting and Automation for Security: Utilize scripting (Python, Bash, and Groovy) to automate repetitive tasks, enhance CI/CD workflows, integrate security tools, and create custom tools to improve development and security productivity
Monitoring and Logging with Security Focus: Implement secure monitoring and logging solutions to proactively identify and address potential security vulnerabilities, performance issues, and malicious behavior in the CI/CD pipelines
Security Collaboration: Collaborate closely with security teams, development teams, QA, and other stakeholders to understand their needs, deliver secure solutions, and participate in security reviews
Continuous Security Improvement: Continuously identify areas for improvement within our CI/CD processes and infrastructure from a security perspective, and implement security best practices to improve efficiency and reliability
Documentation with Security Focus: Create and maintain clear, comprehensive, and security focused documentation for all CI/CD processes, infrastructure, and security controls
Vulnerability and Security Assessment: Perform regular vulnerability assessments of the CI/CD infrastructure and application codebase to identify and fix potential weaknesses
Threat Modeling: Conduct threat modeling exercises to identify potential security risks in the CI/CD process
Troubleshooting with Security Awareness: Troubleshoot issues with the CI/CD pipeline, build processes, deployments, and other areas related to the build system, always with security as a key concern
Integrate QA automation tools and frameworks within the CI/CD pipeline, enabling automated testing of new builds
Stay up to date with Security: Stay abreast of industry trends and emerging DevOps and security technologies and practices
Requirements:
Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience
5+ years of experience as a DevOps Engineer, specializing in CI/CD and automation
Proven experience with implementing DevSecOps best practices in CI/CD pipelines
Strong proficiency in Java build processes, dependency management with Maven/Gradle, artifact repositories (Nexus, Artifactory) and experience with secure coding practices
Solid understanding of branching strategies, with the ability to implement security controls in branching
Extensive experience developing and maintaining complex Jenkins pipelines with built-in security checks, including declarative and scripted pipelines using Groovy
Proven experience developing and using Jenkins shared libraries using Groovy
Proven experience with infrastructure as code (Terraform, CloudFormation, Ansible) with a security focus
Excellent scripting skills in Python, Bash, and Groovy, with the ability to automate security tasks and integrate security tools into the workflows
Experience in implementing security scanning tools (e.g., SAST, DAST, SCA)
Experience with monitoring and logging tools (e.g., Prometheus, Grafana, ELK) with a security perspective
Strong understanding of containerization technologies (Docker) and container orchestration (Kubernetes), including secure configurations
Experience with cloud platforms (AWS, Azure, GCP), including their security features
Excellent problem-solving, analytical, and troubleshooting skills, with a focus on security
Strong communication and collaboration skills
Experience working with security teams
Solid understanding of QA automation testing tools and frameworks
Nice to have:
Experience with microservices architectures
Experience with security tools such as vulnerability scanners and penetration testing tools
Experience with secret management tools such as HashiCorp Vault
Experience with various testing frameworks and their integration into CI/CD pipelines with a focus on security
Familiarity with other programming languages (e.g., Go)
Experience with GitOps and declarative configurations with security focus