DevSecOps Engineer - STACKIT (m/f/d)

Schwarz Digits Romania โ€” Romania ยท Posted ~1 day ago

๐Ÿ”“ Log in to save this job, tailor your resume & track your apply process โ€” 7 days free, no card needed.

Log in to add to target list

Description

Company Overview Schwarz Digits creates the technological foundation for digital sovereignty in Europe. As the IT and digital division of the Schwarz Group, we develop and manage the IT infrastructures for the retail divisions Lidl and Kaufland, as well as Schwarz Production and PreZero. At the same time, we operate as an independent provider in the external market to support companies across Europe in their digital transformation. We bundle our core services in the areas of Cloud, Cyber Security, Data & AI, Communication, and Workspace. You want to make a big difference and play a key role in shaping our solution with state-of-the-art cloud technologies. Identifying with the products we provide to our customers is very important to us, which is why we actively practice end-to-end responsibility. In this role, you will receive support from many internal service teams to continuously refine our services and build a long-term, stable, and reliable solution that our customers will be happy to use. The Impact You Will Create The IaaS domain owns the compute, storage and networking primitives customers run their workloads on. We are looking for a skilled DevSecOps Engineer, who will be responsible for securing our software supply chain and automating release management. This role involves implementing robust security standards across our pipelines, managing complex dependency ecosystems, and driving operational excellence through automated release processes and observability. Software Supply Chain Security (SSCS): Implement full pipeline traceability and transparency, including the generation and enforcement of SBOM and SLSA attestations for all builds.Dependency Hardening: Manage global dependency security by enforcing strict pinning and locking, and utilizing internal proxies/mirrors to verify and secure all components.Vulnerability Management: Establish automated CVE scanning and reporting within the CI/CD pipelines, and implement runtime security scans on clusters.Release Automation: Automate the release rollout process to reduce manual intervention and enhance overall development velocity.Visibility & Traceability: Build comprehensive monitoring and logging systems for releases, ensuring auditability, clear documentation, and visibility of deployed artifact versions. Experience And Skills You Will Need Extensive experience in designing and implementing test architectures for complex software systems.Deep expertise in CI/CD methodology and "shift-left" testing principles.Solid understanding of OpenStack and API concepts to build effective test primitives.Proven ability to optimize test coverage vs. execution time.Experience in coding and scripting (e.g., Python, Go) for test automation and infrastructure management. Our Offer 25 days annual leave + 1 day annual leave after 5 years in the companyMeal ticketsAdditional health insuranceA good work life balance with flexible working timeA pleasant and diverse environment with regular events, team buildings and stimulating activitiesA huge array of tools & technologies available on the spot and ready for a steady personal developmentVariety of opportunities with one of the strongest and largest retail companies in the worldYou will be part of an international team composed of people from different countries and backgroundsOnboarding and support/mentoring