- Company Name
- AlmavivA de Belgique
- Job Title
- Expert in DevSecOps
- Job Description
-
**Job title:** Expert in DevSecOps
**Role Summary:**
Lead the design, implementation and continuous improvement of enterprise‑grade DevSecOps pipelines and security architectures. Drive the adoption of secure software delivery practices across IT projects, ensuring robust API, container, cloud, and infrastructure security while maintaining automated CI/CD workflows and compliance standards.
**Expectations:**
- Engineer and evolve end‑to‑end DevSecOps pipelines for large, multi‑user information systems.
- Champion secure coding, testing, and deployment practices organization‑wide.
- Deliver on technical design, implementation, and optimization of security controls for APIs, containers, serverless, and cloud environments.
**Key Responsibilities:**
1. Architect, deploy, and maintain CI/CD pipelines (GitLab, AWS CodeBuild, EKS, CloudFront, etc.).
2. Design and enforce API security (OpenID Connect, OAuth2, TLS, Keycloak), container security, and cloud security best practices.
3. Implement automated security testing (SAST, DAST), dependency scanning (SonarQube, Fortify, Maven, Dependency‑Track).
4. Develop and manage infrastructure as code (Terraform, Ansible, Docker, Kubernetes, serverless orchestration).
5. Administer databases (MongoDB, PostgreSQL, Virtuoso, OpenSearch) and monitor services (Dynatrace, Prometheus).
6. Integrate and maintain collaboration tools (JIRA, Confluence, Office 365, SharePoint) to support DevSecOps workflows.
7. Provide guidance and training on secure coding, tool usage, and best practices to cross‑functional teams.
**Required Skills:**
- 10+ years in enterprise multi‑user information system design and delivery.
- 10+ years experience in DevOps & Cloud (CI/CD, GitLab, AWS services – CodeBuild, EKS, Secret Manager, CloudFront).
- 10+ years proficiency with container/serverless orchestration (Docker, Kubernetes, Ansible, Terraform, buildpacks).
- 8+ years experience in at least one programming language (Java, Python, Bash, Perl).
- 8+ years in security testing & dependency management (SAST, DAST, Fortify, SonarQube, Sonatype).
- 8+ years in cloud security architecture and security requirements implementation.
- 8+ years in security protocols (OpenID Connect, OAuth2, TLS, Keycloak).
- 6+ years in database administration (MongoDB, PostgreSQL, Virtuoso, OpenSearch).
- 6+ years in monitoring tools (Dynatrace, Prometheus).
- 6+ years in AWS cloud services.
- 10+ years using collaboration and productivity tools (JIRA, Confluence, Office 365, SharePoint).
**Required Education & Certifications:**
- Master’s degree in Computer Science, Information Systems, or related field.
---