EU remote
DevSecOps Engineer - deadline 04/11/2026
About this role
The tasks that service provider will be expected to perform include any or all of the following. · Develop, configure, and monitor DevSecOps pipelines using pipelines-as-code with integrated quality gates (linting, testing, security scanning, environment promotion), ensuring efficient and reliable CI/CD processes. · Automate deployments with progressive delivery strategies (e.g., canary, blue/green) and feature flagging, incorporating automated rollback mechanisms to ensure reliable and repeatable releases.
· Manage deployment and setup of services and applications, ensuring they are configured correctly and optimized for the production environment. · Manage infrastructure provisioning, scaling, and availability using Infrastructure-as-Code (IaC) practices, with drift detection, policy-as-code enforcement, and tested disaster recovery runbooks (RTO/RPO). · Implement monitoring and observability solutions (metrics, logs, traces) aligned with service level objectives (SLOs), ensuring application and infrastructure performance and health are tracked effectively.
· Coordinate incident management through on-call rotations, incident playbooks/runbooks, and blameless post-incident reviews, ensuring production issues are resolved swiftly with lessons learned embedded. · Perform performance tuning of both applications and infrastructure to ensure optimal usage of resources and user experience. · Integrate security practices into CI/CD pipelines, including software supply-chain security (SBOMs, provenance checks), secrets management, and least-privilege access, to maintain secure system configurations.
· Design and maintain internal developer platforms with golden paths, reusable templates, and policy-based guardrails, enabling teams to securely and consistently self-serve infrastructure and application environments. · Plan and implement upgrades and migrations of software stack. · Monitor, analyze, and optimize cloud costs by applying FinOps practices such as budgeting, forecasting, rightsizing, and implementing show back/chargeback models to maximize cost efficiency.
· Document pipelines, processes, and infrastructure for reusability and knowledge transfer. · Establish artifact repositories and image signing; enforce software supply-chain policies and integrity checks. · Design and implement cloud solutions that meet business objectives, with defined operational Key Performance Indicators (KPIs) for availability, reliability, and performance, and clear ownership boundaries. · Manage and optimize cloud infrastructure and operations against defined Key Performance Indicators (KPIs) for cost, performance, and availability, adhering to operational excellence best practices.