DevSecOps Engineer

About Camlin Camlin is a global technology leader that operates with the vision of bringing revolutionary products to life for a wide range of industries, including power and rail, and also has interests in a number of R&D projects in a variety of scientific sectors. At Camlin we believe in high quality engineering and design, allowing us to develop market leading products and services. In short, we love creating value for our customers by solving difficult problems. As of now, Camlin operates in over 20 countries worldwide.🌐 We are looking for a DevSecOps Engineer (or a DevOps Engineer with a strong security mindset) to strengthen our Embedded Systems Unit. In this role, you will collaborate closely with embedded development teams and our Information Security Management System (ISMS) team to ensure that our industrial and field‑deployed products meet cybersecurity requirements defined in CRA, RED, and IEC 62443. You will not be responsible for creating governance processes; instead, you will execute and apply the workflows and policies defined by ISMS, ensuring they are consistently implemented across development, testing, manufacturing, and deployment environments. You will support the full lifecycle of our embedded systems, toolchains, factory test infrastructure, and backend services. IMPORTANT NOTE: Although this role is in a hybrid way of working and remote friendly, at least One Interview from selection process will require to be onsite in our Krakow office. Responsibilities Secure Development & Compliance Execute secure development workflows defined by ISMS. Support developers in applying secure coding, secure update mechanisms, access‑control, and documentation practices aligned with CRA/RED/IEC 62443. Vulnerability Scanning & Reporting Run SCA / SAST / DAST tools (e.g., SonarQube, JFrog XRay) within CI/CD pipelines.Prepare actionable vulnerability reports aligned with CRA and IEC 62443 vulnerability‑handling requirements. Security Testing Perform or coordinate grey‑box or white‑box security tests on firmware and backend releases.Validate system behaviour against RED 3.3(d/e/f) cybersecurity safeguards and IEC 62443 component requirements. Software License & SBOM Reporting Generate and maintain Software Bills of Materials (SBOMs).Produce OSS license compliance reports to support CRA transparency and supply‑chain documentation. Security Tooling for Production & Field Devices Operate and maintain firmware signing pipelines.Handle certificate provisioning, key management tools, and secure device onboarding workflows defined by ISMS.Support secure manufacturing workflows such as device identity injection and protected configuration handling. Factory Test Systems Own and improve factory self‑tests, diagnostics, and manufacturing server infrastructure.Add new dashboards, performance metrics, and manufacturing KPIs.Implement data visualization, alerting, and monitoring in tools such as Grafana. Database & Backend Infrastructure Maintain and further develop the manufacturing database.Implement structured schema versioning.Develop APIs to replace direct SQL access and improve data integrity.Optimize database structure, queries, and overall performance. CI/CD & Automated Deployment Maintain secure, reproducible CI/CD build and release pipelines for embedded firmware and backend services.Manage deployment workflows, including environment provisioning, artifact signing, and release traceability. Technical Skills Required Skills & Qualifications Familiarity with SCA/SAST/DAST tools such as SonarQube, JFrog XRay, or similar.Understanding of SBOM standards (CycloneDX, SPDX).Programming in Python, Node.js.Experience with SQL databases and API design.Practical knowledge of monitoring and observability tools (Grafana, Prometheus, Loki).Ability to maintain and troubleshoot factory automation systems and backend services.Experience with Embedded Linux and Yocto Cybersecurity & Standards Understanding of cybersecurity principles relevant to embedded systems.Awareness of CRA, RED cybersecurity requirements, and IEC 62443 concepts (zones, conduits, secure development lifecycle).Willingness for executing ISMS‑defined processes (secure SDLC, vulnerability management, incident support).Familiarity with secure communication protocols (TLS, certificate pinning, encrypted transport layers). Desired Qualifications (Nice‑to‑Have) Familiarity with CI/CD pipeline development in GitLabUnderstanding of database architectureExperience with Node.jsHands‑on with Grafana Benefits: Employment contract with competitive salaryWork in small, self-organized and autonomous development teams with the ability to choose technologies and best practicesHybrid work model (office in Kraków)Company Pension & Life Assurance Schemes On-site parking (car and bike) UoP with 80% author’s rights tax reliefMyBenefit system with Multisport membership, private healthcare (Medicover)Wellness programmes Our Values We work togetherWe believe in peopleWe won’t accept the ‘way it has always been done’We listen to learnWe’re trying to do the right thing Equal Employment Opportunity Statement Individuals seeking employment at Camlin are considered without regards to race, colour, religion, national origin, age, sex, marital states, ancestry, physical or mental disability, gender identity or sexual orientation.