- Company Name
- BPIFRANCE
- Job Title
- Ingénieur DevSecOps F/H
- Job Description
-
**Job title:** Senior DevSecOps Engineer
**Role Summary:**
Design, automate, and secure the end‑to‑end software delivery pipeline for critical banking applications. Build and maintain microservice infrastructure, CI/CD pipelines, observability, and security controls in a cloud‑native environment, while driving continuous improvement and enabling application teams to adopt DevSecOps practices.
**Expectations:**
- 8+ years of experience in DevSecOps, with a strong background in banking or financial IT.
- Profound knowledge of CI/CD, cloud, and security automation.
- Fluent in English (technical and business).
- Proven track record of delivering scalable, secure microservice architectures.
**Key Responsibilities:**
- Develop and maintain automation primitives (IaC, pipelines, security scans).
- Integrate and evolve tooling across the organization’s catalogue (docker, Kubernetes, OpenShift, Terraform, Ansible).
- Build and manage CI/CD pipelines using GitLab CI, Jenkins, and Maven.
- Implement observability and alerting solutions for production services.
- Secure application environments continuously (static/dynamic code analysis, secrets management, vulnerability scanning).
- Collaborate with Agile teams to adopt DevSecOps practices and improve delivery speed and quality.
- Support production incidents, performing root‑cause analysis and remediation.
- Participate in technical architecture reviews and contribute to future‑proofing initiatives.
**Required Skills:**
- Programming: Java (Java 11, JEE, Spring Boot 2.x), TypeScript, Angular 10, Spring, PostgreSQL.
- Cloud & Containers: Docker, Kubernetes, RedHat OpenShift, Tanzu, AWS.
- DevOps & Automation: GitLab, GitLab CI, Jenkins, Maven, XLDeploy, Terraform, Ansible.
- Messaging & Services: Kafka, REST/Swagger APIs, microservices architecture, event‑driven design.
- Testing & Quality: Cypress, Cucumber, JUnit, Postman.
- Security & compliance: Continuous security controls, secure coding, architectural security reviews.
- Tools: Blaze Advisor, Experian Power Curve (experience preferred).
**Required Education & Certifications:**
- Bachelor’s or Master’s degree in Computer Science, Software Engineering, or equivalent engineering school.
- Certifications in cloud (AWS, Azure, GCP), DevOps (Docker, Kubernetes, Terraform), and security (CISSP, CompTIA Security+, etc.) are a plus but not mandatory.