DevSecOps Expert

VASS; Brussel; Sur place; EUR 65 000 - 85 000; Plein temps

Résumé du poste

VASS in Brussels is seeking a DevSecOps Expert for the European Commission. The candidate will build and manage CI/CD pipelines using Azure DevOps, ensure secure network connectivity, and automate security workflows. Requirements include proficiency in PowerShell, deep knowledge of security standards, and Azure certifications. This role emphasizes collaboration and a commitment to diversity and inclusion in the workplace.

Qualifications

• Strong understanding of Git-based version control and branching strategies.
• Understanding of the Medallion Architecture and promoting data across environments.
• Proficiency in PowerShell, Python, and SQL for automation and auditing.
• Solid understanding of DNS, firewall rules, and Network Security Groups.
• Deep knowledge of OAuth 2.0, OpenID Connect, and SAML protocols.
• Ability to collaborate with security compliance teams.

Responsabilités

• Build and manage CI/CD pipelines using Azure DevOps or GitHub Actions.
• Configure and maintain private network connectivity for secure traffic.
• Integrate automated security scanning into data workflows.
• Deploy and manage API Gateways and Reverse Proxies.
• Provision and manage Fabric capacities using Bicep or Terraform.
• Configure real-time observability using Azure Monitor.

Connaissances

DevOps Methodology

Data Lifecycle Knowledge

Scripting & Programming

Network Security

Authentication Standards

Collaboration

Languages

Formation

AZ-400: Microsoft Certified: DevOps Engineer Expert

AZ-500: Microsoft Azure Security Technologies

AZ-700: Microsoft Azure Network Engineer Associate

DP-600: Microsoft Certified: Fabric Analytics Engineer Associate

Description du poste

A global digital transformation company with a team of more than 4,900 global players in 26 countries – in Europe, America and Asia, working together to put organizations at the forefront of innovation by bringing together talent, knowledge and technology.

Location: VASS BRUSSELS

Role: DevSecOps Expert

VASS BeNeLux, in partnership with the European Commission, is currently seeking an Expert DevSecOps Expert to work from the European Commission.

The role:

• Pipeline Automation: Build and manage end-to-end CI/CD pipelines using Azure DevOps or GitHub Actions to automate the deployment of Fabric workspaces, notebooks, and semantic models.
• Secure Perimeter Management: Configure and maintain private network connectivity, including Private Endpoints and VNET injection, to ensure Fabric traffic never traverses the public internet.
• Security Orchestration: Integrate automated security scanning (SAST/SCA) and secret management into data workflows to prevent credential leakage and vulnerabilities.
• Gateway & Proxy Management: Deploy and manage API Gateways and Reverse Proxies to mediate access to data APIs, ensuring traffic filtering and load balancing.
• Infrastructure Automation: Provision and manage Fabric capacities and network security (Private Links, VNET injection) using Bicep, Terraform, or ARM templates.
• Monitoring & Alerting: Configure real‑time observability using Azure Monitor and Log Analytics to track platform health, cost consumption, and security incidents.
• Access Governance: Implement and audit granular access controls using Microsoft Entra ID (formerly Azure AD) and Fabric‑specific RBAC models.

You have:

• DevOps Methodology: Strong understanding of Git‑based version control, branching strategies (Gitflow), and release management.
• Data Lifecycle Knowledge: Understanding of the Medallion Architecture (Bronze/Silver/Gold) and how to promote data assets across environments (Dev, Test, Prod).
• Scripting & Programming: Proficiency in PowerShell and Python for automation tasks and SQL for data security auditing.
• Network Security: Solid understanding of DNS environments, firewall rules, and Network Security Groups (NSGs).
• Authentication Standards: Deep knowledge of modern protocols, specifically OAuth 2.0, OpenID Connect (OIDC), and SAML.
• Collaboration: Ability to work alongside data architects and security compliance teams to translate security requirements into technical guardrails.
• Languages: Good knowledge of written/spoken English (working language). Knowledge of French is an asset.

Specific Expertise:

• Microsoft Fabric Ecosystem: Deep technical knowledge of OneLake, Lakehouses, Warehouses, and the integration of Data Factory within the Fabric environment.
• Policy as Code: Experience implementing Azure Policy to enforce compliance standards across cloud resources.
• Identity & Access: Implementation of authentication mechanisms, including managed identities, service principals, and conditional access policies via Microsoft Entra ID.
• Data Security: Expertise in configuring Row‑Level Security (RLS), Object‑Level Security (OLS), and Microsoft Purview for data discovery and classification.
• API Integration: Experience using the Microsoft Fabric REST APIs to automate workspace settings and administrative tasks.
• Networking: Expertise in securing data ingress/egress using Azure Private Link, Virtual Network (VNET) peering, etc.
• Reverse proxies: Experience configuring application gateways, reverse proxies to handle SSL termination and Web Application Firewall (WAF) policies.

Certifications:

• DevOps: AZ‑400: Microsoft Certified: DevOps Engineer Expert – required
• Security: AZ‑500: Microsoft Azure Security Technologies – a plus
• Networking: AZ‑700: Microsoft Azure Network Engineer Associate – a plus
• Core Fabric: DP‑600: Microsoft Certified: Fabric Analytics Engineer Associate – a plus

At VASS we take action every day to achieve a favourable environment that facilitates and promotes equal opportunities, non‑discrimination, diversity and inclusion of all people. We select our talent based on business needs, skills and merits.