DevSecOps Architect / Technical Lead
Andersen is hiring a DevSecOps Architect / Technical Lead for a project modernizing digital banking architecture and enhancing security, scalability, and platform reliability.
andersen · На сервисе с: 03.10.26 15:03
Зарплата не указанаАрменияПортугалияОАЭКатарАргентинаАвстрияГибрид
Andersen is hiring a DevSecOps Architect / Technical Lead for a project modernizing digital banking architecture and enhancing security, scalability, and platform reliability.
The customer is a financial services organization providing banking products and digital solutions for individual and business clients. The company operates through an established service network and online platforms and is part of a larger international financial group, supporting ongoing development of its services for a broad client base.
The project is focused on defining a structured architecture roadmap for a large-scale digital banking transformation program. It includes target-state architecture, platform modernization, API governance, security, data and analytics, system decoupling, and phased migration of business capabilities to reduce system dependencies and accelerate future digital development.
The role requires a one-week on-site onboarding with the client in Slovenia. Travel and accommodation expenses are fully covered by the company. Candidates must be able and willing to travel to Slovenia for the onboarding.
- Translating the DevSecOps master plan into a practical implementation roadmap.
- Defining reusable CI/CD, security and release-management standards.
- Supporting the transition from Bitbucket/Jenkins to Azure Repos and Azure Pipelines.
- Implementing security scanning and release gates in CI/CD pipelines.
- Configuring security controls for AKS, container images, identities and secrets.
- Establishing artifact signing, SBOM generation and secure promotion processes.
- Integrating platform security events with the bank’s monitoring and SIEM solutions.
- Defining vulnerability-management, audit-evidence and incident-response processes.
- Providing technical leadership, recommendations and knowledge transfer to delivery teams.
- Participating directly in configuration, integration and troubleshooting activities.
- Experience in DevSecOps, cloud security or platform security for 5+ years.
- Proven experience designing and driving DevSecOps processes, architecture, or engineering standards across multiple teams, not only implementing predefined solutions within a single project.
- Experience translating high-level security or DevSecOps strategy into a practical technical roadmap, architecture decisions, standards, and implementation guidance.
- Experience owning technical decisions and driving the adoption of DevSecOps practices across engineering teams.
- Strong hands-on experience with Microsoft Azure.
- Hands-on experience implementing security controls and gates across CI/CD, including several of the following: SAST, SCA, DAST, secret scanning, IaC scanning, and container scanning.
- Practical experience with Kubernetes and container security, preferably AKS.
- Experience with Infrastructure as Code, preferably Terraform.
- Experience with identity, secrets, and certificate management.
- Understanding of software supply-chain security practices such as SBOM, artifact signing, provenance, and secure artifact promotion.
- Ability to combine architecture and technical leadership with hands-on implementation and troubleshooting.
- Experience mentoring or technically guiding engineers and working across development, platform, security, and architecture teams.
- Level of English – from Upper-Intermediate and above.
- Experience in banking, financial services, or another regulated industry.
- Experience with Jenkins and Bitbucket, including migration to Azure DevOps.
- Experience with Azure security services such as Key Vault, Azure Container Registry, Defender for Cloud / Containers, and Microsoft Sentinel.
- Hands-on experience with security tools such as SonarQube, Sonatype, Gitleaks, Checkov, OWASP ZAP, DefectDojo, or similar.
- Experience with software supply-chain security, including SBOM generation, artifact signing, provenance, and secure artifact promotion.
- Experience with vulnerability-management and SIEM solutions.
- Experience with policy-as-code and Kubernetes security controls such as Azure Policy, OPA, Gatekeeper, or other admission controls.
- Understanding of DORA, audit traceability, segregation of duties, and security requirements in regulated environments.
- Experience in teamwork with leaders in FinTech, Healthcare, Retail, Telecom, and others. Andersen cooperates with such businesses as Samsung, Siemens, Johnson & Johnson, BNP Paribas, Ryanair, Mercedes, TUI, Verivox, Allianz, T-Systems, etc..
- The opportunity to change the project and/or develop expertise in an interesting business domain.
- Job conditions – you can work both fully remotely and from the office or can choose a hybrid variant.
- Guarantee of professional, financial, and career growth! The company has introduced systems of mentoring and adaptation for each new employee.
- The opportunity to earn up to an additional 1,000 EUR per month, depending on the level of expertise, which will be included in the annual bonus, by participating in the company's activities.
- Access to the corporate training portal, where the entire knowledge base of the company is collected and which is constantly updated.
- Bright corporate life (parties / pizza days / PlayStation / fruits / coffee / snacks / movies).
- Certification compensation (AWS, PMP, etc).
- Referral program.
- Private health insurance and sports compensation, depending on the type of employment.
Join us!
Похожие вакансии DevOps
Сайты компаний
Зарплата не указанаКипрLimassol
About the role
We’re looking for a Senior DevSecOps Engineer to help us take our security work further through automation across SOC and DevSecOps processes.
You’ll join AppSec Cheetahs, our team of ethical hackers. We look for vulnerabilities, strengthen application security, and share our knowledge with other engineers.
In this role, you’ll build and improve security solutions, develop automation with Python, create and maintain CI/CD pipelines, and explore AI integrations to make security processes more efficient.
It’s a great opportunity to combine your DevOps and Python expertise with Application Security, work on real security challenges, and have a direct impact on the security of our products.
Responsibilities
- Integrate Security into CI/CD: Design, build, and maintain a secure CI/CD pipeline by integrating static (SAST), dynamic (DAST), and interactive (IAST) application security testing tools.
- Automation: Develop and implement automation for security processes, vulnerability management, and compliance checks to ensure continuous security feedback.
- Infrastructure as Code (IaC) Security: Secure IaC scripts (e.g., Terraform, CloudFormation) by scanning for misconfigurations and vulnerabilities before deployment.
- Tooling & Maintenance: Evaluate, implement, and manage security tools for vulnerability scanning, monitoring, and compliance.
- Mentorship & Advocacy: Act as a security champion within the organization.
- Mentor developers and operations teams on secure coding practices and DevSecOps principles.
Qualifications
- Experience: 5+ years of experience in a DevOps, Security Engineering, or a similar role, with at least 2 years focused specifically on DevSecOps.
- CI/CD Expertise: Proven experience with CI/CD tools such as Jenkins, GitLab CI, any else.
- Scripting Proficiency: Strong scripting skills in languages like Python, Bash, or Go for automation tasks.
- Cloud Platform Knowledge: Knowledge of at least one major cloud provider (AWS, Azure, or GCP) and its security services (e.g., AWS Security Hub, Azure Security Center, GCP Security Command Center).
- IaC Skills: Experience with Infrastructure as Code tools like Terraform, Ansible, or CloudFormation. Container Security: Strong understanding of containerization technologies (Docker, Kubernetes) and their security challenges, including securing container images and runtime environments.
- Security Tools: Familiarity with a wide range of security tools, such as SAST (e.g., SonarQube, Checkmarx), DAST (e.g., OWASP ZAP, Burp Suite), and vulnerability scanners (e.g., Trivy, Nessus).
- Soft Skills: Problem solving abilities, strong communication skills, and the ability to work collaboratively across different teams.
Benefits
- Help us challenge injustice by creating fair choices for millions of people across 47 countries.
- Develop your professional skills with access to mentoring, career consulting, and learning programs.
- Collaborate with teams around the world and gain international experience through our Global Talent Exchange Program.
- Engage in company-wide challenges, awards, sports activities, employee-led social impact and volunteering projects.
- Work alongside people who take initiative, speak openly, and challenge themselves to grow.
- Improve your language skills through co-financed courses and internal speaking clubs.
- Annual salary from 70 700 EUR gross.
Final benefits may vary depending on the location.
HireSeeker собирает вакансии со всех площадок и присылает только релевантные. Бесплатно.