DevSecOps Engineer - deadline 26/10/2026

The tasks that service provider will be expected to perform include any or all of the following.

· Develop, configure, and monitor DevSecOps pipelines using pipelines-as-code with integrated quality gates (linting, testing, security scanning, environment promotion), ensuring efficient and reliable CI/CD processes.

· Automate deployments with progressive delivery strategies (e.g., canary, blue/green) and feature flagging, incorporating automated rollback mechanisms to ensure reliable and repeatable releases.

· Manage deployment and setup of services and applications, ensuring they are configured correctly and optimized for the production environment.

· Manage infrastructure provisioning, scaling, and availability using Infrastructure-as-Code (IaC) practices, with drift detection, policy-as-code enforcement, and tested disaster recovery runbooks (RTO/RPO).

· Implement monitoring and observability solutions (metrics, logs, traces) aligned with service level objectives (SLOs), ensuring application and infrastructure performance and health are tracked effectively.

· Coordinate incident management through on-call rotations, incident playbooks/runbooks, and blameless post-incident reviews, ensuring production issues are resolved swiftly with lessons learned embedded.

· Perform performance tuning of both applications and infrastructure to ensure optimal usage of resources and user experience.

· Integrate security practices into CI/CD pipelines, including software supply-chain security (SBOMs, provenance checks), secrets management, and least-privilege access, to maintain secure system configurations.

· Design and maintain internal developer platforms with golden paths, reusable templates, and policy-based guardrails, enabling teams to securely and consistently self-serve infrastructure and application environments.

· Plan and implement upgrades and migrations of software stack.

· Monitor, analyze, and optimize cloud costs by applying FinOps practices such as budgeting, forecasting, rightsizing, and implementing show back/chargeback models to maximize cost efficiency.

· Document pipelines, processes, and infrastructure for reusability and knowledge transfer.

· Establish artifact repositories and image signing; enforce software supply-chain policies and integrity checks.

· Design and implement cloud solutions that meet business objectives, with defined operational Key Performance Indicators (KPIs) for availability, reliability, and performance, and clear ownership boundaries.

· Manage and optimize cloud infrastructure and operations against defined Key Performance Indicators (KPIs) for cost, performance, and availability, adhering to operational excellence best practices.

· Conduct cost analysis and monitor cloud expenses using Financial Operations (FinOps) practices, including budgeting, forecasting, rightsizing, and implementing showback/chargeback models.

· Ensure security, compliance, and data protection through the implementation of the shared responsibility model, zero-trust principles, encryption, and adherence to relevant compliance frameworks (e.g., General Data Protection Regulation (GDPR)).

· Automate cloud processes and workflows using scripting and tools.

· Troubleshoot and resolve cloud-related issues to maintain service levels and meet defined operational Key Performance Indicators (KPIs) for availability and reliability.

· Collaborate with development teams to support cloud-based applications.

·  Evaluate and recommend new cloud services and technologies to enhance capabilities, improve efficiency, and reduce costs while aligning with architectural standards.

·  Create and maintain comprehensive documentation for cloud systems, architectures, and operational processes to ensure knowledge sharing and operational continuity.

· Manage the end-to-end cloud architecture, development, and migration lifecycle, including strategy definition, landing zone design, networking, data migration planning, and execution via detailed runbooks.

·  Provide cloud expertise and support to stakeholders and teams.

· Establish cloud landing zones with governance guardrails (e.g., policies, tagging, Role-Based Access Control (RBAC)) and a well-defined environment hierarchy to ensure security and compliance.

·  Implement comprehensive observability (monitoring, logging, tracing), incident response processes, and disaster recovery/business continuity plans (DR/BCP) with defined Recovery Time and Point Objectives (RTO/RPO).

University degree corresponding to Level 7 of the European Qualifications Framework (which typically corresponds to a master’s level or 5 years of higher education), and minimum 15 years of IT professional experience. or University degree corresponding to Level 6 of the European Qualifications Framework (which typically corresponds to a bachelor’s level or 3 years of higher education) and minimum 17 years of IT professional experience.

Very good knowledge of English language, both spoken and written, corresponding to Level B2 or higher of the Common European Framework of Reference for Languages (CEFR).

·       10 years of professional experience in an International Organization

·       5 years of professional experience with a combination of Docker, AWS CDK, ECS, ECR

·       7 years of experience with AWS networking: VPC, VPC peering, Direct connect, Security group, Shield advanced, WAF

·       7 years of experience with AWS security: AWS config, Security Lake, Control tower, IAM role, Cognito, Shield advanced, Security Group

·       3 years of professional experience with monitoring tools (Dynatrace, Splunk, Cloudwatch etc.).

·       1 year of professional experience with static code analysis with CDK_NAG.

·       17 years of professional experience with development languages (incl. Python, Yaml, Bash, Java, Typescript).

·       7 years acting as lead architect and specialist for cloud platforms AWS.

·       5 years of professional experience to implement Single Sign On on AWS console.

·       7 years of professional experience with Infrastructure-as-Code (CloudFormation, CDK)

·       2 years deep understanding of Amazon Q / AWS Kiro

·       4 years of professional experience with Weblogic and Oracle DB

·       2 years of professional experience with Wildfly and PostgreSQL

Additional requirements:

SPECIFIC EXPERTISE AND TECHNOLOGIES:

The proposed candidate shall demonstrate experience in the following fields:

• Proven experience with DevSecOps lifecycle tools (GitLab, Atlassian, Github).

• Proven experience with System Design and Architecture.

• Experience with large, enterprise-level multi-user Information Systems.

• Good knowledge in establishing and managing deployment pipeline and release management.

• Good knowledge in conducting DevSecOps in an agile work environment.

• Experience in estimating and proposing cost reduction in the cloud (FinOps)

• Good knowledge in cloud security architecture and security requirements.

• Basic knowledge with secret management tools (Hashicorp AWS Secret Manager).

• Good knowledge of network fundamentals (DNS, Load Balancing, Firewalls, VPNs, basic network troubleshooting, etc.).

• Knowledge of DevSecOps practices and tools (e.g., CI/CD pipelines, GitLab, AWS CodeCommit, Azure DevOps) to integrate cloud with delivery processes.

• Knowledge of solution and systems architecture principles, with experience in designing scalable, secure, and interoperable digital solutions.

• Understanding of software development methodologies such as Agile and Waterfall.

SKILLS :

• Knowledge of French is an advantage

• Skill in evaluating trade-offs and making timely decisions.

• Competence in defining a solution strategy and roadmap.

• Talent for explaining complex technology in accessible terms.

• Ability to build productive relationships with diverse stakeholders.

• Capacity to adjust plans in response to evolving needs.

• Ability to understand, speak and write English

• Talent for building relationships and adapting communication to the audience.

• Results-oriented mindset, focused on delivering.

• Ability to onboard quickly, understand context, and contribute with minimal supervision.

• Results-oriented mindset, focused on delivering.

• Ability to work in a hybrid (remote /onsite) team as well as autonomously