DevSecOps Engineer

Almaviva Group; Brussel Hoofdstad; Hybrid; EUR 120,000 - 160,000; Full time

Job summary

Almaviva Group seeks an experienced Cloud Architect to drive DevSecOps, IaC, and secure cloud platforms across AWS and multi-cloud environments. You will design solutions, implement continuous delivery, and optimize cost, security, and performance in collaboration with product teams.

The role requires strong leadership, 15+ years in IT, and deep knowledge of AWS, Kubernetes, CI/CD tooling, and FinOps; hybrid work setup in Belgium is possible.

Qualifications

• 15+ years IT experience in related field (international exposure preferred).
• Strong background in cloud architecture, DevSecOps and security-by-design.
• Proven ability to lead architecture and release management at scale.

Responsibilities

• Develop, configure, and monitor DevSecOps pipelines with IaC and quality gates.
• Automate deployments with progressive delivery strategies and feature flags.
• Manage cloud infrastructure provisioning, drift detection, and disaster recovery runbooks.
• Implement monitoring, observability, and SLO-aligned dashboards.
• Coordinate incident management and blameless post-incident reviews.
• Plan upgrades and migrations, optimize cloud costs with FinOps.
• Establish cloud landing zones, RBAC, and governance guardrails.

Skills

Cloud architecture

DevSecOps practices

System design & architecture

FinOps

AWS & multi-cloud

CI/CD leadership

Security in cloud

Stakeholder management

Hybrid/remote collaboration

Documentation & governance

Education

Master's degree or equivalent (Level 7)

Bachelor's degree or Level 6 with 17+ years IT experience

Tools

Docker

AWS CDK

ECS

ECR

CloudFormation

CDK_NAG

Dynatrace

Splunk

CloudWatch

GitLab

Atlassian/GitHub

Job description

The tasks that service provider will be expected to perform include any or all of the following.

• Develop, configure, and monitor DevSecOps pipelines using pipelines-as-code with integrated quality gates (linting, testing, security scanning, environment promotion), ensuring efficient and reliable CI/CD processes.
• Automate deployments with progressive delivery strategies (e.g., canary, blue/green) and feature flagging, incorporating automated rollback mechanisms to ensure reliable and repeatable releases.
• Manage deployment and setup of services and applications, ensuring they are configured correctly and optimized for the production environment.
• Manage infrastructure provisioning, scaling, and availability using Infrastructure-as-Code (IaC) practices, with drift detection, policy-as-code enforcement, and tested disaster recovery runbooks (RTO/RPO).
• Implement monitoring and observability solutions (metrics, logs, traces) aligned with service level objectives (SLOs), ensuring application and infrastructure performance and health are tracked effectively.
• Coordinate incident management through on-call rotations, incident playbooks/runbooks, and blameless post-incident reviews, ensuring production issues are resolved swiftly with lessons learned embedded.
• Perform performance tuning of both applications and infrastructure to ensure optimal usage of resources and user experience.
• Integrate security practices into CI/CD pipelines, including software supply-chain security (SBOMs, provenance checks), secrets management, and least-privilege access, to maintain secure system configurations.
• Design and maintain internal developer platforms with golden paths, reusable templates, and policy-based guardrails, enabling teams to securely and consistently self-serve infrastructure and application environments.
• Plan and implement upgrades and migrations of software stack.
• Monitor, analyze, and optimize cloud costs by applying FinOps practices such as budgeting, forecasting, rightsizing, and implementing show back/chargeback models to maximize cost efficiency.
• Document pipelines, processes, and infrastructure for reusability and knowledge transfer.
• Establish artifact repositories and image signing; enforce software supply-chain policies and integrity checks.
• Design and implement cloud solutions that meet business objectives, with defined operational Key Performance Indicators (KPIs) for availability, reliability, and performance, and clear ownership boundaries.
• Manage and optimize cloud infrastructure and operations against defined Key Performance Indicators (KPIs) for cost, performance, and availability, adhering to operational excellence best practices.
• Conduct cost analysis and monitor cloud expenses using Financial Operations (FinOps) practices, including budgeting, forecasting, rightsizing, and implementing showback/chargeback models.
• Ensure security, compliance, and data protection through the implementation of the shared responsibility model, zero-trust principles, encryption, and adherence to relevant compliance frameworks (e.g., General Data Protection Regulation (GDPR)).
• Automate cloud processes and workflows using scripting and tools.
• Troubleshoot and resolve cloud-related issues to maintain service levels and meet defined operational Key Performance Indicators (KPIs) for availability and reliability.
• Collaborate with development teams to support cloud-based applications.
• Evaluate and recommend new cloud services and technologies to enhance capabilities, improve efficiency, and reduce costs while aligning with architectural standards.
• Create and maintain comprehensive documentation for cloud systems, architectures, and operational processes to ensure knowledge sharing and operational continuity.
• Manage the end-to‑end cloud architecture, development, and migration lifecycle, including strategy definition, landing zone design, networking, data migration planning, and execution via detailed runbooks.
• Provide cloud expertise and support to stakeholders and teams.
• Establish cloud landing zones with governance guardrails (e.g., policies, tagging, Role-Based Access Control (RBAC)) and a well-defined environment hierarchy to ensure security and compliance.
• Implement comprehensive observability (monitoring, logging, tracing), incident response processes, and disaster recovery/business continuity plans (DR/BCP) with defined Recovery Time and Point Objectives (RTO/RPO).

Job requirements

Minimum level of qualification

University degree corresponding to Level 7 of the European Qualifications Framework (which typically corresponds to a master’s level or 5 years of higher education), and minimum 15 years of IT professional experience. or University degree corresponding to Level 6 of the European Qualifications Framework (which typically corresponds to a bachelor’s level or 3 years of higher education) and minimum 17 years of IT professional experience.

Language knowledge:

Very good knowledge of English language, both spoken and written, corresponding to Level B2 or higher of the Common European Framework of Reference for Languages (CEFR).

Specific expertise

• 10 years of professional experience in an International Organization
• 5 years of professional experience with a combination of Docker, AWS CDK, ECS, ECR
• 7 years of experience with AWS networking: VPC, VPC peering, Direct connect, Security group, Shield advanced, WAF
• 7 years of experience with AWS security: AWS config, Security Lake, Control tower, IAM role, Cognito, Shield advanced, Security Group
• 3 years of professional experience with monitoring tools (Dynatrace, Splunk, Cloudwatch etc.).
• 1 year of professional experience with static code analysis with CDK_NAG.
• 17 years of professional experience with development languages (incl. Python, Yaml, Bash, Java, Typescript).
• 7 years acting as lead architect and specialist for cloud platforms AWS.
• 5 years of professional experience to implement Single Sign On on AWS console.
• 7 years of professional experience with Infrastructure-as-Code (CloudFormation, CDK)
• 2 years deep understanding of Amazon Q / AWS Kiro
• 4 years of professional experience with Weblogic and Oracle DB
• 2 years of professional experience with Wildfly and PostgreSQL

Additional requirements:

SPECIFIC EXPERTISE AND TECHNOLOGIES:

The proposed candidate shall demonstrate experience in the following fields:

• Proven experience with DevSecOps lifecycle tools (GitLab, Atlassian, Github).
• Proven experience with System Design and Architecture.
• Experience with large, enterprise-level multi-user Information Systems.
• Good knowledge in establishing and managing deployment pipeline and release management.
• Good knowledge in conducting DevSecOps in an agile work environment.
• Experience in estimating and proposing cost reduction in the cloud (FinOps)
• Good knowledge in cloud security architecture and security requirements.
• Basic knowledge with secret management tools (Hashicorp AWS Secret Manager).
• Good knowledge of network fundamentals (DNS, Load Balancing, Firewalls, VPNs, basic network troubleshooting, etc.).
• Knowledge of DevSecOps practices and tools (e.g., CI/CD pipelines, GitLab, AWS CodeCommit, Azure DevOps) to integrate cloud with delivery processes.
• Knowledge of solution and systems architecture principles, with experience in designing scalable, secure, and interoperable digital solutions.
• Understanding of software development methodologies such as Agile and Waterfall.

SKILLS :

• Knowledge of French is an advantage
• Skill in evaluating trade-offs and making timely decisions.
• Competence in defining a solution strategy and roadmap.
• Talent for explaining complex technology in accessible terms.
• Ability to build productive relationships with diverse stakeholders.
• Capacity to adjust plans in response to evolving needs.
• Ability to understand, speak and write English
• Talent for building relationships and adapting communication to the audience.
• Results-oriented mindset, focused on delivering.
• Ability to onboard quickly, understand context, and contribute with minimal supervision.
• Results-oriented mindset, focused on delivering.
• Ability to work in a hybrid (remote /onsite) team as well as autonomously