DevSecOps Engineer

Nature of the Tasks Develop, configure, and monitor DevSecOps pipelines using pipelines-as-code with integrated quality gates (linting, testing, security scanning, environment promotion), ensuring efficient and reliable CI/CD processes.Automate deployments with progressive delivery strategies (e.g., canary, blue/green) and feature flagging, incorporating automated rollback mechanisms to ensure reliable and repeatable releases.Manage deployment and setup of services and applications, ensuring they are configured correctly and optimized for the production environment.Manage infrastructure provisioning, scaling, and availability using Infrastructure-as-Code (IaC) practices, with drift detection, policy-as-code enforcement, and tested disaster recovery runbooks (RTO/RPO).Implement monitoring and observability solutions (metrics, logs, traces) aligned with service level objectives (SLOs), ensuring application and infrastructure performance and health are tracked effectively.Coordinate incident management through on-call rotations, incident playbooks/runbooks, and blameless post-incident reviews, ensuring production issues are resolved swiftly with lessons learned embedded.Perform performance tuning of both applications and infrastructure to ensure optimal usage of resources and user experience.Integrate security practices into CI/CD pipelines, including software supply-chain security (SBOMs, provenance checks), secrets management, and least-privilege access, to maintain secure system configurations.Design and maintain internal developer platforms with golden paths, reusable templates, and policy-based guardrails, enabling teams to securely and consistently self-serve infrastructure and application environments.Plan and implement upgrades and migrations of software stack.Monitor, analyse, and optimise cloud costs by applying FinOps practices such as budgeting, forecasting, rightsizing, and implementing showback/chargeback models to maximise cost efficiency.Document pipelines, processes, and infrastructure for reusability and knowledge transfer.Implement GitOps for declarative cluster and application configuration management.Establish artifact repositories and image signing; enforce software supply-chain policies and integrity checks. Specific Expertise and Technologies Proven experience with Docker, Kubernetes, Terraform, Ansible, HashiCorp Vault, Linux.Proven experience with DevSecOps lifecycle tools (GitLab, Atlassian, GitHub).Proven experience with static code analysis (SonarQube, Fortify, Snyk, etc.).Proven experience with black box and white box testing (OWASP, HP Fortify, etc.).Proven experience with repository management tools (Nexus etc.).Proven experience with monitoring tools (Dynatrace, Splunk, Prometheus etc.).Proven experience with internal developer platforms (Backstage, Humanitec etc.).Proven experience with development languages (Python, YAML, Bash, PowerShell, Ruby, or Perl).Proven experience with cloud platforms (AWS, Azure, OVH etc.).Proven experience with Infrastructure-as-Code (Terraform, CloudFormation, CDK, Bicep, ARM).Proven experience with System Design and Architecture.Experience with large, enterprise-level multi-user Information Systems.Good knowledge in establishing and managing deployment pipelines and release management.Good knowledge in conducting DevSecOps in an Agile work environment.Good knowledge in cloud security architecture and security requirements.Good knowledge of continuous delivery and Application Lifecycle Management tools (JIRA, Git, Bamboo, Nexus, etc.).Good knowledge of secret management tools (CyberArk, HashiCorp etc.).Good knowledge of network fundamentals (DNS, Load Balancing, Firewalls, VPNs, basic network troubleshooting, etc.).CI options such as GitHub Actions, GitLab CI, Jenkins; and GitOps controllers like Argo CD and Flux.Supply-chain tooling (e.g., SBOM generation/signing, SLSA) and policy agents (e.g., OPA, Kyverno). Minimum Level of Expertise NormalCertification and/or Standards Mandatory: One of the following certifications (or equivalent): AWS Certified DevOps Engineer – ProfessionalMicrosoft Azure DevOps Engineer ExpertDocker Certified AssociateCertified Kubernetes Administrator (CKA)Certified Kubernetes Application Developer (CKAD)HashiCorp Terraform AssociateDevSecOps Engineering (DSOE) Skills Rapid self-starting capability and experience in team working.Excellent interpersonal and communication skills.Ability to participate in multi-lingual meetings, ease of communication.Ability in applying security and cloud best practices.Automation skills to optimize and understand DevSecOps pipelines.Ability to understand, speak, and write English; French is considered an additional asset.Ability to work in a team as well as autonomously.Results-oriented mindset, focused on delivering.