{"id":4177287,"url":"https://alion.io/job/allianz-technical-architect-azure-devops-3470","title":"Technical Architect-azure devops_3470","company":{"id":1757325,"name":"Allianz","domain":"allianz.com","url":"https://alion.io/company/allianz-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":{"grade":"A","score":100,"open_postings":144,"ghost_share":0.007,"stale_share":0.007,"repost_share":0.09,"time_to_fill_p50_days":15,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Solutions","role_family":"Solutions","seniority":"staff","employment_type":"part_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Ansible","optional":false},{"name":"ArgoCD","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Azure Cosmos DB","optional":false},{"name":"Azure Data Factory","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Azure SQL Database","optional":false},{"name":"Bash","optional":false},{"name":"Bitbucket","optional":false},{"name":"CI/CD","optional":false},{"name":"Configuration Management","optional":false},{"name":"Confluence","optional":false},{"name":"Crossplane","optional":false},{"name":"Docker","optional":false},{"name":"Dynatrace","optional":false},{"name":"Git","optional":false},{"name":"Gitflow","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab","optional":false},{"name":"Grafana","optional":false},{"name":"Harbor","optional":false},{"name":"Helm","optional":false},{"name":"Incident Management","optional":false},{"name":"Istio","optional":false},{"name":"JFrog Artifactory","optional":false},{"name":"Jira","optional":false},{"name":"Kibana","optional":false},{"name":"Kubernetes","optional":false},{"name":"Packer","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Service Mesh","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Terraform","optional":false},{"name":"Trunk-Based Development","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-12T14:42:41Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-14T00:52:07Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Job Title: DevSecOps Engineer\nLocation: Ireland (Allianz Technology)\nDepartment: DevOps / Platform Engineering\nReports To: Devops Lead\nPosition Overview\nAZT Ireland is seeking a hands-on DevSecOps Engineer to embed security throughout our Azure-based SDLC, working within our existing DevOps toolchain and infrastructure. The role combines the platform and automation depth of our DevOps engineering practice with the security methodology defined by AZT's DPE Security function - Threat Modelling, SCA, SAST, DAST, IAST, CSPM and RASP.\nThis is a delivery-focused role. The immediate priority is standing up and operationalising Dynamic Application Security Testing (DAST) across our pipelines and environments, in parallel with ongoing responsibility for CI/CD, infrastructure automation and container platform support. The ideal candidate is equally comfortable scripting an Azure pipeline, tuning a Kubernetes deployment, and configuring a security scanning tool against a running application.\nKey Responsibilities\n1. DevSecOps Tooling & Pipeline Security - priority: DAST\nLead the rollout of Dynamic Application Security Testing (DAST): select/configure tooling, integrate scanning into CI/CD, and establish scan cadence (manual, scheduled, and build-triggered).\nDesign DAST test coverage for AuthN/AuthZ flaws, session-management vulnerabilities, configuration issues and insecure workflows across web, API and microservice applications.\nOwn reporting and remediation workflows for DAST findings, working with development teams to prioritise and close out vulnerabilities.\nSupport and extend the wider DevSecOps pipeline: Threat Modelling / security architecture review, Software Configuration Analysis (SCA) and Static Application Security Testing (SAST) at build time.\nEvaluate and pilot Interactive Application Security Testing (IAST) where suited to the application stack in use.\nContribute to Cloud Security Posture Management (CSPM) - monitoring Azure configuration, compliance and vulnerabilities - and to Runtime Application Self-Protection (RASP) for production workloads.\nAct as a shared-responsibility partner alongside Development, Security and Operations: automate security checks in the pipeline, harden deployment configurations, and keep systems patched and up to date.\n2. GitHub Enterprise & CI/CD\nAdminister and optimise GitHub Enterprise (or Azure DevOps) to support development teams; build and maintain CI/CD pipelines (GitHub Actions / YAML pipelines) for build, test, security-scan and release stages.\nManage build agents (Linux and Windows), Git repositories, branching strategies (GitFlow / trunk-based) and Personal Access Token (PAT) governance.\nLead migration of source repositories from GitLab, Bitbucket, SVN and other platforms into GitHub Enterprise, ensuring data integrity, security and minimal downtime.\nImplement security best practice within the GitHub Enterprise ecosystem (branch protection, secret scanning, access control).\n3. Cloud Infrastructure (Azure)\nOperate and improve Azure infrastructure: VMs/VMSS, Azure Kubernetes Service (AKS), Application Service Environment (ASE), Azure SQL Database, Cosmos DB, Storage (Blob/File), Data Factory.\nManage networking and security controls: VNETs, NSGs, Private Endpoints/Private Link, Application Gateway and WAF, Key Vault.\nBuild and maintain Infrastructure as Code using Crossplane, Terraform or ARM templates; use Packer for image creation and Ansible for configuration management.\n4. Containers & Microservices\nManage AKS clusters, pod deployment and scaling, Helm charts, Istio service mesh, Flannel networking and ingress controllers.\nSupport containerisation practices (Docker) and container registries (Harbor, Amazon ECR, Azure ACR).\nAutomate deployment using Argo CD and integrate deployment automation with the broader CI/CD toolchain.\n5. SDLC Toolchain & Binary Management\nManage binary repositories (Nexus) and support migration from legacy tools (e.g. Artifactory) as part of platform modernisation.\nWork across the full SDLC toolchain cluster: build/package management, container registries, deployment automation and monitoring.\n6. Scripting & Automation\nDevelop automation using Bash/Shell, PowerShell and Python (preferred) across Azure CLI, Azure PowerShell and REST APIs.\nBuild scripts and tooling to automate security checks, infrastructure changes and repetitive operational processes.\n7. Databases\nSupport Azure SQL administration, performance tuning, backup/restore and on-premises-to-Azure migration.\nSupport NoSQL platforms - MongoDB (PaaS and VM-hosted) and Azure Cosmos DB.\n8. Monitoring & Observability\nMaintain dashboards and alerting in Dynatrace (primary platform), Grafana, Kibana (ELK), Azure Monitor/Log Analytics and Application Insights.\nSupport incident management, log analysis, troubleshooting and performance monitoring across environments.\n9. Collaboration\nWork in agile teams using Jira for issue tracking and Confluence for documentation; contribute to agile ceremonies and continuous improvement.\nPartner with development, operations and security teams to understand needs, provide solutions, and troubleshoot toolchain issues.\nProvide training and support on best practice within GitHub Enterprise and the wider DevSecOps toolchain.\nDevSecOps Methodology - Practices Covered by This Role\nThe table below reflects AZT's DevSecOps approach: security integrated continuously across the SDLC rather than concentrated at the end. DAST is the current priority delivery focus.\nPractice (SDLC Stage)\nScope & Focus\nThreat Modelling (Plan / Design)\nIdentify threats against architecture components - user interfaces, data flows, data processes, data storage. Rate and prioritise remediation. Supported by AZT's global Threat Modelling service.\nSoftware Configuration Analysis - SCA (Develop)\nDetect vulnerabilities in open-source dependencies; produce SBOMs and check licence attribution/compliance. Typically bundled with SAST tooling (GHAS).\nStatic Application Security Testing - SAST (Build)\nAnalyse source code for vulnerabilities before runtime, without executing the application. Performed once code is feature-complete; earliest and cheapest point to fix defects (shift-left).\nDynamic Application Security Testing\nSimulate real-world attacks against the running application: crafted requests, response analysis, and detection of AuthN/AuthZ flaws, session-management issues, misconfiguration and insecure workflows. This is a priority project for AZT Ireland and the primary near-term focus of this role.\nInteractive Application Security Testing - IAST (Test)\nAgent/sensor-based testing that combines SAST- and DAST-style visibility across code, data flow, requests/responses and configuration; traces exploitable vulnerabilities back to source. Suited to web, mobile, microservice and API-based applications; tool selection depends on the application stack in use.\nCloud Security Posture Management - CSPM (Release / Deploy)\nContinuous monitoring of cloud configuration, compliance and vulnerabilities across cloud services and resources; unifies visibility across providers into a single console.\nRuntime Application Self-Protection - RASP (Operate / Monitor)\nEmbedded security agents that monitor application behaviour and block attacks in real time at the application layer, complementing network-level controls.\nQualifications\nRequired\nBachelor's degree in Computer Science, Information Technology, or related field (or equivalent hands-on experience).\nProven DevOps/DevSecOps experience with a strong focus on the GitHub Enterprise ecosystem and CI/CD pipeline creation (GitHub Actions).\nHands-on experience with Azure infrastructure services listed above, and with Infrastructure as Code (Terraform, ARM, or Crossplane).\nPractical experience with at least one application security testing practice (SAST, DAST or IAST); willingness and ability to lead DAST implementation specifically.\nExperience with Kubernetes (AKS), Helm and container registries (Nexus, Harbor, ECR or ACR).\nStrong scripting ability (Python preferred; Bash/PowerShell) and comfort with Azure CLI/REST APIs.\nExperience with monitoring tools such as Dynatrace, Grafana or the ELK stack.\nExperience working in agile teams using Jira and Confluence.\nStrong communication and cross-team collaboration skills, and sound understanding of security best practice and compliance standards.\nPreferred\nCertifications in DevOps and/or security-related fields.\nPrior involvement in a DAST or broader application-security-testing rollout.\nExperience with Azure Cosmos DB, MongoDB, and cloud-to-cloud or on-prem-to-cloud database migrations.\nExperience with repository migration (GitLab, Bitbucket, SVN → GitHub Enterprise).\nFamiliarity with Cloud Security Posture Management (CSPM) and Runtime Application Self-Protection (RASP) tooling.Good to have :\n Having a basic understanding or exposure to AI tools would be a plus.\nFamiliarity with basic AI tools is considered an advantage.\nBasic knowledge or experience with AI tools will be beneficial.\nExposure to AI tools, even at a basic level, is a value-add.A fundamental grasp of AI tools will be an added benefit.\nYour benefits: We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroadWe believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location)From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fosteredFlexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach\nWhat We Offer\nAbout Allianz Technology\nWith its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked with running, optimizing, transforming, and innovating the infrastructure, applications, and services together with Allianz companies to co-create the best customer experience. We service the entire spectrum of digitalization - from one of the industry's largest IT infrastructure projects that spans data centres, networks, and security, to application platforms ranging from workplace services to digital interaction. In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.\nFind us at:\nwww.linkedin.com/company/allianz-technology\nCommitment to Integrity, Fairness & Inclusion\nAllianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. Ultimately, our greatest strength as a company lies in the unique skills, experiences, and backgrounds our employees contribute.\n\n Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.\nAt Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where peopl...","description_format":"text","description_chars":12392,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Hybrid work","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Property & Casualty Insurance","Asset Management & Funds","Life Insurance & Annuities"],"lifecycle":[{"event":"open","at":"2026-11-12T16:25:07Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"green card filings: 1","filings_12m":0,"filings_prev_12m":7,"green_card_filings_12m":1,"median_offered_wage_usd":147500,"route":null,"cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":15,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-14T02:31:55Z"},"pay":null,"html_url":"https://alion.io/job/allianz-technical-architect-azure-devops-3470","json_url":"https://alion.io/job/allianz-technical-architect-azure-devops-3470.json","meta":{"generated_at":"2026-11-14T02:31:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3367,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1757325},"rest":"https://alion.io/mcp/rest/get_company?id=1757325"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fallianz-technical-architect-azure-devops-3470"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fallianz-technical-architect-azure-devops-3470"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fallianz-technical-architect-azure-devops-3470"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/allianz-technical-architect-azure-devops-3470\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fallianz-technical-architect-azure-devops-3470"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4177287}},{"tool":"search_jobs","arguments":{"company":"allianz.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4177287},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}