DevSecOps Specialist

MEERAB GROUP; Brussel; On-site; EUR 70,000 - 110,000; Full time

Job summary

MEERAB GROUP seeks a DevSecOps Specialist to build secure, automated CI/CD pipelines and manage infrastructure across the software lifecycle.

You will implement secure deployment practices, automate canary and blue‑green releases, and enforce policy‑as‑code with drift detection. A strong focus on SBOM, secrets management, and developer platforms complements this role.

Qualifications

• Proven professional experience in DevSecOps engineering within enterprise environments.
• Hands-on expertise with Docker, Kubernetes, and container orchestration.
• Strong knowledge of Infrastructure-as-Code tools such as Terraform, CloudFormation or Azure Bicep.
• Experience designing, implementing and managing CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins, etc.).
• Solid understanding of security tooling (Vault, Snyk, SonarQube, OPA) and software supply-chain best practices.

Responsibilities

• Develop and maintain DevSecOps CI/CD pipelines as code, incorporating testing, security scanning, and quality gates.
• Automate application deployments using progressive delivery strategies such as canary and blue‑green releases.
• Provision, scale, and manage infrastructure with IaC tools while enforcing policy‑as‑code and drift detection.
• Implement monitoring, observability, and incident‑management processes aligned with SLOs and runbooks.
• Embed security practices—including SBOM generation, secrets management, and GitOps—into the development workflow.
• Design and operate internal developer platforms and artifact repositories with reusable templates and guardrails.

Skills

DevSecOps engineering

CI/CD pipelines

Security practices

Runbooks & incident management

Tools

Docker

Kubernetes

Terraform

CloudFormation

Azure Bicep

GitLab CI

GitHub Actions

Jenkins

Vault

Snyk

SonarQube

OPA

Job description

We are seeking a DevSecOps Specialist to join our team. The role focuses on building secure, automated CI/CD pipelines and managing infrastructure throughout the software lifecycle.

Key Responsibilities

• Develop and maintain DevSecOps CI/CD pipelines as code, incorporating testing, security scanning, and quality gates.
• Automate application deployments using progressive delivery strategies such as canary and blue‑green releases.
• Provision, scale, and manage infrastructure with IaC tools while enforcing policy‑as‑code and drift detection.
• Implement monitoring, observability, and incident‑management processes aligned with SLOs and runbooks.
• Embed security practices—including SBOM generation, secrets management, and GitOps—into the development workflow.
• Design and operate internal developer platforms and artifact repositories with reusable templates and guardrails.

Required Qualifications

• Proven professional experience in DevSecOps engineering within enterprise environments.
• Hands‑on expertise with Docker, Kubernetes, and container orchestration.
• Strong knowledge of Infrastructure‑as‑Code tools such as Terraform, CloudFormation or Azure Bicep.
• Experience designing, implementing and managing CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins, etc.).
• Solid understanding of security tooling (Vault, Snyk, SonarQube, OPA) and software supply‑chain best practices.

Nice to have

• Familiarity with OVH or other comparable cloud providers beyond AWS and Azure.
• Experience with internal developer platforms such as Backstage or Humanitec.