DevSecOps Engineer

At Uni Systems, we are working towards turning digital visions into reality. We are continuously growing and we are looking for a DevSecOps Engineer to join our UniQue team.

What will you be doing in this role?

• Design, implement and operate CI/CD pipelines using GitLab, Bamboo, Bitbucket and related tools.

• Integrate SAST, DAST, SCA, quality checks and vulnerability management into DevSecOps pipelines. 11
• Support cloud and containerised environments using AWS, Docker, Podman and Kubernetes.
• Manage secrets and credentials using HashiCorp Vault.
• Administer DevSecOps and ALM platforms including JIRA, GitLab, Bamboo, Nexus and Artifactory.
• Automate infrastructure and platform activities using Terraform, Ansible, Bash and Groovy.
• Implement monitoring and dashboards using Dynatrace.
• Support application and platform migrations, upgrades and modernisation.
• Manage artifact repositories, package management and deployment processes.
• Integrate authentication, certificates and secure connectivity using SAML, SSL/TLS and SSH.
• Support troubleshooting, performance analysis and incident resolution.
• Document DevSecOps architectures, pipelines and operational procedures.
• Coordinate with development, operations, security and project teams.

Requirements

• University degree at EQF Level 7 (Master’s degree or equivalent, typically requiring at least five years of higher education) and Minimum 15 years of professional IT experience.
• At least 13 years of professional experience in DevOps, Continuous Delivery, and ALM, with strong expertise in CI/CD, automation, and development tools.
• 8 years of professional experience in DevSecOps and application security, including security testing, code-quality controls and CI/CD security integration.
• 15 years of professional experience in software development, scripting and related technologies.
• 3 years of professional experience in containerisation and container orchestration technologies, including Docker and Kubernetes.
• 3 years of professional experience in secrets management and secure credential handling, including HashiCorp Vault and its integration into DevOps/DevSecOps environments.
• Proven experience with static and dynamic application security testing using SonarQube, Fortify, OWASP ZAP and related SAST/DAST tools.
• Proven experience with software composition analysis and vulnerability management practices.
• Proven experience with artifact and repository management tools, including Nexus, Artifactory and Maven.
• Proven experience with monitoring and observability tools, in particular Dynatrace.
• Proven experience with scripting and development languages, including Python, Groovy, Bash, PowerShell, Java and JavaScript.
• Proven experience with cloud platforms, including AWS and Microsoft Azure.
• Proven experience with Infrastructure-as-Code and configuration automation, including Terraform and Ansible.
• Proven experience with system design and architecture for enterprise and cloud environments.
• Experience with large-scale, enterprise-level multi-user information systems.
• Good knowledge of CI/CD pipeline design, deployment automation and release management.
• Good knowledge of DevSecOps practices in Agile environments.
• Good knowledge of cloud-security architecture, OWASP practices and ISO 27001 principles.
• Good knowledge of Application Lifecycle Management tools and processes.
• Good knowledge of secrets management using HashiCorp Vault.
• Good knowledge of containerised and Kubernetes-based deployment environments.
• Experience integrating security controls such as SAST, DAST and SCA into automated CI/CD pipelines.
• Knowledge of GitOps and declarative deployment practices is an advantage.
• Very good knowledge of English language, both spoken and written, corresponding to Level B2

CERTIFICATES and/or STANDARDS

Mandatory: One of the following or an equivalent certification: AWS Certified DevOps Engineer - Professional, Microsoft Azure DevOps Engineer Expert, Docker Certified Associate, Certified Kubernetes Administrator (CKA), Certified Kubernetes Application Developer (CKAD), HashiCorp Terraform Associate, or DevSecOps Engineering (DSOE).

Benefits

At Uni Systems, we are providing equal employment opportunities and banning any form of discrimination on grounds of gender, religion, race, color, nationality, disability, social class, political beliefs, age, marital status, sexual orientation or any other characteristics. Take a look at Diversity, Equality & Inclusion Policy for more information.