Senior DevSecOps Engineer – Kubernetes & Software Supply Chain Security
Core
Implement, automate, and maintain security controls across CI/CD pipelines, Kubernetes platforms, and production environments for a major public-sector client.
Role type
Senior DevSecOps Engineer (Kubernetes & Software Supply Chain Security)
Builds
Secure CI/CD pipelines, hardened Kubernetes clusters, and secure software supply chains
Domain
Public sector digital transformation, Cloud Security, DevSecOps
Required skills
SAST/SCA/secret scanning, SBOM generation, artifact signing, Kubernetes security (admission control, RBAC, network policies), Linux/Windows hardening, vulnerability management, incident response, AI security controls
Preferred skills
Proxmox, NIS2 compliance experience, public sector experience
Technologies
GitLab CI, GitHub Actions, Terraform, Ansible, Python, Bash, PowerShell, Kyverno, OPA Gatekeeper, Vault, ELK, Wazuh, Falco, CycloneDX, SPDX, Sigstore, cosign
Responsibilities
Implement automated security controls in CI/CD pipelines; secure software supply chain via SBOM and artifact signing; implement Kubernetes security controls; harden Linux and Windows environments; support runtime threat detection and incident response; establish security frameworks for AI-assisted development
Seniority
Senior, hands-on IC