DevSecOps Specialist

Phoenix Technologies; Brussel; On-site; EUR 70,000 - 110,000; Full time

Job summary

Phoenix Technologies is seeking a DevSecOps Specialist to build secure, automated CI/CD pipelines and manage infrastructure across the software lifecycle.

You will implement secure deployment pipelines, utilize IaC, and embed security practices into the workflow while enabling scalable developer platforms and reliable runbooks.

Qualifications

• Proven professional experience in DevSecOps engineering within enterprise environments.
• Hands-on expertise with Docker, Kubernetes, and container orchestration.
• Strong knowledge of Infrastructure-as-Code tools such as Terraform, CloudFormation or Azure Bicep.
• Experience designing, implementing and managing CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins, etc.).
• Solid understanding of security tooling (Vault, Snyk, SonarQube, OPA) and software supply-chain best practices.

Responsibilities

• Develop and maintain DevSecOps CI/CD pipelines as code, incorporating testing, security scanning, and quality gates.
• Automate application deployments using progressive delivery strategies such as canary and blue‑green releases.
• Provision, scale, and manage infrastructure with IaC tools while enforcing policy‑as‑code and drift detection.
• Implement monitoring, observability, and incident‑management processes aligned with SLOs and runbooks.
• Embed security practices—including SBOM generation, secrets management, and GitOps—into the development workflow.
• Design and operate internal developer platforms and artifact repositories with reusable templates and guardrails.

Skills

DevSecOps

CI/CD pipelines

Security best practices

Tools

Docker

Kubernetes

Terraform

CloudFormation

Azure Bicep

GitLab CI

GitHub Actions

Jenkins

Vault

Snyk

SonarQube

OPA

Job description

We are seeking a DevSecOps Specialist to join our team. The role focuses on building secure, automated CI/CD pipelines and managing infrastructure throughout the software lifecycle.

Key Responsibilities

• Develop and maintain DevSecOps CI/CD pipelines as code, incorporating testing, security scanning, and quality gates.
• Automate application deployments using progressive delivery strategies such as canary and blue‑green releases.
• Provision, scale, and manage infrastructure with IaC tools while enforcing policy‑as‑code and drift detection.
• Implement monitoring, observability, and incident‑management processes aligned with SLOs and runbooks.
• Embed security practices—including SBOM generation, secrets management, and GitOps—into the development workflow.
• Design and operate internal developer platforms and artifact repositories with reusable templates and guardrails.

Required Qualifications

• Proven professional experience in DevSecOps engineering within enterprise environments.
• Hands‑on expertise with Docker, Kubernetes, and container orchestration.
• Strong knowledge of Infrastructure‑as‑Code tools such as Terraform, CloudFormation or Azure Bicep.
• Experience designing, implementing and managing CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins, etc.).
• Solid understanding of security tooling (Vault, Snyk, SonarQube, OPA) and software supply‑chain best practices.

Nice to have

• Familiarity with OVH or other comparable cloud providers beyond AWS and Azure.
• Experience with internal developer platforms such as Backstage or Humanitec.