DevSecOps Engineer

Tata Consultancy Services; Brussel Hoofdstad; On-site; EUR 70,000 - 100,000; Full time

Job summary

Tata Consultancy Services in Belgium is seeking a DevSecOps Engineer to design, automate, and monitor secure CI/CD pipelines across cloud and on-prem environments. You will implement IaC, GitOps, and proactive security controls, plus drive performance optimization and governance with cross-team collaboration.

Join a team that values security, automation, and scalable infrastructure, leveraging Docker, Kubernetes, Terraform, and modern tooling to enable reliable, secure releases.

Qualifications

• Experience designing, developing and operating DevSecOps pipelines.
• Strong knowledge of IaC, policy-as-code and security integrations.
• Proven ability to implement GitOps and automated rollbacks.
• Experience with cloud platforms and cost optimization practices.
• Strong collaboration and communication in multi-lingual teams.

Responsibilities

• Develop, configure, and monitor DevSecOps pipelines with quality gates.
• Automate deployments with progressive delivery and feature flags.
• Manage deployment and setup of services for production environments.
• Implement infrastructure provisioning with drift detection and disaster recovery runbooks.
• Establish observability with metrics, logs, and traces and monitor against SLOs.

Skills

Docker

Kubernetes

Terraform

Ansible

HashiCorp Vault

Linux

GitLab

GitHub

SonarQube

Snyk

OWASP

Nexus

Education

Docker Certified Associate

HashiCorp Terraform Associate

Tools

AWS

Azure

GCP

Backstage

Humanitec

Job description

• Develop, configure, and monitor DevSecOps pipelines using pipelines-as-code with integrated quality gates (linting, testing, security scanning, environment promotion), ensuring efficient and reliable CI/CD processes.
• Automate deployments with progressive delivery strategies (e.g., canary, blue/green) and feature flagging, incorporating automated rollback mechanisms to ensure reliable and repeatable releases.
• Manage deployment and setup of services and applications, ensuring they are configured correctly and optimized for the production environment.
• Manage infrastructure provisioning, scaling, and availability using Infrastructure-as-Code (IaC) practices, with drift detection, policy-as-code enforcement, and tested disaster recovery runbooks (RTO/RPO).
• Implement monitoring and observability solutions (metrics, logs, traces) aligned with service level objectives (SLOs), ensuring application and infrastructure performance and health are tracked effectively.
• Coordinate incident management through on-call rotations, incident playbooks/runbooks, and blameless post-incident reviews, ensuring production issues are resolved swiftly with lessons learned embedded.
• Perform performance tuning of both applications and infrastructure to ensure optimal usage of resources and user experience.
• Integrate security practices into CI/CD pipelines, including software supply-chain security (SBOMs, provenance checks), secrets management, and least-privilege access, to maintain secure system configurations.
• Design and maintain internal developer platforms with golden paths, reusable templates, and policy-based guardrails, enabling teams to securely and consistently self-serve infrastructure and application environments.
• Plan and implement upgrades and migrations of software stack.
• Monitor, analyse, and optimise cloud costs by applying FinOps practices such as budgeting, forecasting, rightsizing, and implementing showback/chargeback models to maximise cost efficiency.
• Document pipelines, processes, and infrastructure for reusability and knowledge transfer.
• Implement GitOps for declarative cluster and application configuration management.
• Establish artifact repositories and image signing; enforce software supply-chain policies and integrity checks.

Specific Expertise and Technologies

• Proven experience with Docker, Kubernetes, Terraform, Ansible, HashiCorp Vault, Linux.
• Proven experience with DevSecOps lifecycle tools (GitLab, Atlassian, GitHub).
• Proven experience with static code analysis (SonarQube, Fortify, Snyk, etc.).
• Proven experience with black box and white box testing (OWASP, HP Fortify, etc.).
• Proven experience with repository management tools (Nexus etc.).
• Proven experience with monitoring tools (Dynatrace, Splunk, Prometheus etc.).
• Proven experience with internal developer platforms (Backstage, Humanitec etc.).
• Proven experience with development languages (Python, YAML, Bash, PowerShell, Ruby, or Perl).
• Proven experience with cloud platforms (AWS, Azure, OVH etc.).
• Proven experience with Infrastructure-as-Code (Terraform, CloudFormation, CDK, Bicep, ARM).
• Proven experience with System Design and Architecture.
• Experience with large, enterprise-level multi-user Information Systems.
• Good knowledge in establishing and managing deployment pipelines and release management.
• Good knowledge in conducting DevSecOps in an Agile work environment.
• Good knowledge in cloud security architecture and security requirements.
• Good knowledge of continuous delivery and Application Lifecycle Management tools (JIRA, Git, Bamboo, Nexus, etc.).
• Good knowledge of secret management tools (CyberArk, HashiCorp etc.).
• Good knowledge of network fundamentals (DNS, Load Balancing, Firewalls, VPNs, basic network troubleshooting, etc.).
• CI options such as GitHub Actions, GitLab CI, Jenkins; and GitOps controllers like Argo CD and Flux.
• Supply-chain tooling (e.g., SBOM generation/signing, SLSA) and policy agents (e.g., OPA, Kyverno).

Minimum Level of Expertise

• Normal

Certification and/or Standards

Mandatory: One of the following certifications (or equivalent):

• Docker Certified Associate
• HashiCorp Terraform Associate

Skills

• Rapid self-starting capability and experience in team working.
• Excellent interpersonal and communication skills.
• Ability to participate in multi-lingual meetings, ease of communication.
• Ability in applying security and cloud best practices.
• Automation skills to optimize and understand DevSecOps pipelines.
• Ability to understand, speak, and write English; French is considered an additional asset.
• Ability to work in a team as well as autonomously.
• Results-oriented mindset, focused on delivering.