{"id":30270,"url":"https://alion.io/job/natixis-devsecops-automation-innovation-engineer-it-cib","title":"DevSecOps, Automation & Innovation Engineer | IT CIB","company":{"id":3335,"name":"Natixis","domain":"natixis.com","url":"https://alion.io/company/natixis","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Portugal"],"countries":["PT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":49000,"max_usd":98000,"period":"year","method":"role_seniority_country_cell","sample_n":8},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Amazon CloudWatch","optional":false},{"name":"AutoGen","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"CentOS Stream","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"Configuration Management","optional":false},{"name":"Datadog","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"Git","optional":false},{"name":"Gitflow","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"GitOps","optional":false},{"name":"Go","optional":false},{"name":"Grafana","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"Jaeger","optional":false},{"name":"Java","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"LangChain","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"New Relic","optional":false},{"name":"OpenShift","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PCI DSS","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Prometheus","optional":false},{"name":"Prompt Engineering","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Self-Healing","optional":false},{"name":"Service Mesh","optional":false},{"name":"SonarQube","optional":false},{"name":"Splunk","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Trivy","optional":false},{"name":"Ubuntu","optional":false},{"name":"Unix","optional":false},{"name":"ArgoCD","optional":true},{"name":"Istio","optional":true},{"name":"Linkerd","optional":true},{"name":"Room","optional":true}],"status":"live","first_seen_at":"2026-07-07T15:20:19Z","employer_posted_date":"2026-07-07","last_verified_at":"2026-10-18T02:24:06Z","board_verified":true,"closed_at":null,"days_open":102,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":102},"description":"Natixis in Portugal is a Centre of Expertise whose mission is to transform traditional banking by developing innovative solutions for the business, operations and work culture of Groupe BPCE worldwide.\nAs part of Groupe BPCE’s international division, Natixis in Portugal designs and delivers solutions for its two core areas - Corporate & Investment Banking and Asset & Wealth Management - as well as transversal services that support all entities across the Group.\nWith more than 3,000 employees representing 46 nationalities, the teams work across Information Technology, Banking Support Activities, and Compliance, in an integrated, inclusive, and cross-functional way, supporting all business lines and platforms of the Group.\nA disruptive mindset and a culture of proximity and agility identify Natixis in Portugal Team and reflect the company's mission to transform traditional banking at a global scale: a perfect match in the Portuguese dynamics and entrepreneurial ecosystem.\n We are seeking an Automation & Innovation Engineer to join the IT Transversal (IT TRV) Innovation & Development team - a forward-looking role driving automation transformation and continuous innovation of CIB's development and deployment ecosystem.\nKey Responsibility Areas:\n1. Automation Transformation Leadership\nPrimary: Eliminate manual development and operational toil\nDesign and implement comprehensive CI/CD pipeline automation across CIB\nAutomate infrastructure provisioning through Infrastructure-as-Code principles and tooling\nEstablish GitOps principles for configuration management and deployment\nAutomate security validation, compliance checks, and dependency scanning\nDrive adoption of containerization (Docker) and orchestration (Kubernetes/OpenShift)\nCreate self-healing infrastructure that requires minimal human intervention\nEliminate manual security reviews through automated security gates\n2. Innovation Leadership & Technology Prototyping\nPrimary: Drive continuous innovation in automation practices\nLead innovation lab activities - prototype and validate emerging automation technologies (service mesh, policy-as-code, advanced observability, GitOps tools)\nConduct technology watch on DevOps, security automation, and AI4DevOps trends\nCreate proof-of-concept implementations for cutting-edge tools/frameworks\nDe-risk adoption of emerging technologies before enterprise-wide rollout\nTransfer innovations and c ompetencies to Development Squad and Business IT teams (IT TRV, IT GMT, IT GBCR)\nEstablish automation excellence center standards and best practices\nPresent findings and recommendations to CIB CIO community\n3. Self-Service Platform Engineering\nPrimary: Build automation platform enabling team independence\nDesign and maintain internal platform (CI/CD, IaC, observability, security scanning)\nCreate Platform-as-a-Service (PaaS) abstractions hiding infrastructure complexity\nEnable developers to deploy code securely without manual security reviews\nEstablish platform as reusable asset available to IT Transversal, GMT, and GBCR teams\nBuild self-service capabilities (provisioning, deployments, rollbacks)\nDocument and evangelize platform usage through training and community building\n4. Developer Experience & Productivity Innovation\nPrimary: Reduce friction and enable developer happiness\nMeasure \"developer toil\" - manual, repetitive work slowing down delivery\nEnable fast feedback loops - deployment feedback in seconds, not hours\nDesign frictionless onboarding - new team members productive in days\nBuild tools that feel like \"magic\" - developers don't need to understand infrastructure\nConduct regular feedback sessions with development teams to identify pain points\n5. Velocity Metrics & Continuous Improvement\nPrimary: Drive measurable improvements in team performance\nDORA Metrics Targets:\nMetric Target\nDeployment frequency Daily or multiple-times-daily\nLead time for changes Reduce from weeks to days/hours\nTime-to-recovery (MTTR) Reduce by 50%+\nChange failure rate Reduce failed deployments\nAutomation Coverage Targets:\nArea Target\nInfrastructure-as-Code coverage 100%\nSecurity validation automation 90%+\nTesting automation 95%+\nSelf-service deployment adoption 90%+\n6. AI4DevOps Innovation & Intelligent Automation\nPrimary: Pioneer AI-driven automation in CIB's DevOps ecosystem\nDesign and deploy AI agents for infrastructure provisioning, deployment automation, and incident remediation\nEstablish AI Agent Governance frameworks:Define permission systems and privilege boundaries for AI agents\nImplement containment strategies ensuring safe agent operation in production\nEstablish audit trails and decision logging for agent actions\n\nImplement AI-driven threat modeling and proactive security:Leverage LLMs for threat modeling and adversary behavior anticipation\nMove from reactive compliance to proactive security hardening\n\nBuild observability and tracing for AI agents (causal graph tracing, confidence metrics)\nDesign data governance policies for AI agents (prevent data exfiltration, implement redaction)\nDevelop \"agent-ready\" infrastructure code (idempotent, predictable, safe for AI consumption)\nEstablish hybrid human-AI workflows with clear escalation paths\n Experience & Education\nBachelor's degree in Computer Science, Engineering, or equivalent experience\n5+ years in DevOps, Infrastructure Engineering, SRE, or related roles\n3+ years driving innovation, prototyping technologies, or leading architectural improvements\nProven track record of reducing manual toil and improving team velocity\nFamiliarity with financial services or regulated industries preferred\nInfrastructure Automation & DevOps\nExpert-level Infrastructure-as-Code principles and practices (tool-agnostic)\nStrong CI/CD expertise: Jenkins, GitLab CI, GitHub Actions\nDeep containerization (Docker) and orchestration (Kubernetes, OpenShift)\nLinux/Unix system administration (RHEL, CentOS, Ubuntu)\nGit mastery (GitFlow, branching strategies)\nCloud platform experience (AWS, Azure, GCP)\nSecurity & Compliance Automation\nApplication security principles (OWASP Top 10)\nSecurity scanning automation: SAST/DAST (SonarQube, Checkmarx, ZAP)\nContainer security scanning (Trivy, Aqua)\nSecrets management (HashiCorp Vault, AWS Secrets Manager)\nCompliance frameworks (PCI-DSS, GDPR, SOX)\nSecurity policy-as-code (OPA, Kyverno)\nAI & Intelligent Automation (AI4DevOps)\nUnderstanding of AI agents and LLM applications in operations\nFamiliarity with prompt engineering and LLM-based tooling\nConceptual knowledge of agent governance, permission systems, and sandboxing\nExposure to AI agent frameworks (LangChain, AutoGen)\nUnderstanding of hybrid human-AI workflow design\nMonitoring, Logging & Observability\nPrometheus, Grafana, ELK Stack, Datadog\nCentralized logging (ELK, Splunk, CloudWatch)\nAPM and distributed tracing (Jaeger, DataDog, New Relic)\nSoftware Engineering & Architecture\nProficiency in Python, Go, Java, or Bash\nREST APIs, microservices, event-driven systems\nSoftware design principles and testing strategies\nSoft Skills\nInnovation mindset - prototyping, experimentation, \"failing fast\"\nEntrepreneurial drive - ownership, bias toward action\nCommunication - technical and non-technical stakeholders\nCollaboration - across Development, Security, and Operations\nTeaching mindset - mentoring teams on automation best practices\nContinuous learning - staying current with emerging technologies\nPreferred Skills\nOpen-source contribution or community involvement\nService mesh experience (Istio, Linkerd)\nGitOps platform experience (ArgoCD, Flux)\nIncident response and postmortem facilitation\nSuccess Metrics & KPIs\nDORA Metrics\nDeployment frequency: weekly → daily or multiple-times-daily\nLead time for changes: weeks → days/hours\nMTTR: reduce by 50%+\nChange failure rate: reduce failed deployments and rollbacks\nAutomation Coverage\nInfrastructure-as-Code: 100% defined in code\nSecurity scanning: 90%+ automated\nTesting: 95%+ executed automatically\nDeployments: 90%+ via automated pipelines\nPlatform Adoption\nDeveloper adoption: 80%+ of CIB developers using self-service platform\nSelf-service deployments: 80%+ of production deployments\nDeveloper toil reduction: 20%+ in manual tasks\nDeveloper satisfaction: 80%+ satisfaction score\nInnovation Impact\nTechnologies prototyped: 2-3 per year\nPrototype-to-production rate: 60%+ within 18 months\nRegular innovation updates to CIB CIO community\nAI4DevOps Maturity\nAI agent governance framework: established and documented\nAI-driven infrastructure changes: 30%+\nAgent success rate: 95%+ reliability\nProactive threat detection via LLM-based modeling\n Our workplace reflects the vibrant spirit of our locations, with initiatives such as a Green Transportation Budget, electric bikes and a flexible Hybrid Work Policy. We promote wellbeing through the Honolulu Wellness Club, a Prayer Room, a Lactation Room, and themed Villages that inspire creativity and collaboration. Through our ESG and DEI strategies, we are committed to being inclusive, caring, and fair, ensuring every voice is heard and valued.","description_format":"text","description_chars":9037,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Continuous learning","Hybrid work"],"hiring_locations":[{"name":"Portugal","iso":"PT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Wealth Management & Financial Advisors","Asset Management & Funds","Investment Banking & M&A Advisory"],"lifecycle":[{"event":"open","at":"2026-07-07T15:20:19Z"}],"visa":[],"liveness":{"score":20,"band":"cold","label":"Long shot","p_open":1,"p_active":0.553,"p_room":0.36,"age_days":101,"expected_fill_days":53,"reasons":["conf:2","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/natixis-devsecops-automation-innovation-engineer-it-cib","json_url":"https://alion.io/job/natixis-devsecops-automation-innovation-engineer-it-cib.json","meta":{"generated_at":"2026-10-18T04:13:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6386,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3335},"rest":"https://alion.io/mcp/rest/get_company?id=3335"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnatixis-devsecops-automation-innovation-engineer-it-cib"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnatixis-devsecops-automation-innovation-engineer-it-cib"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnatixis-devsecops-automation-innovation-engineer-it-cib"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/natixis-devsecops-automation-innovation-engineer-it-cib\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnatixis-devsecops-automation-innovation-engineer-it-cib"}]}