DevOps Security Engineer – OpenShift

Apeirum GmbH; Barcelona; Hybrid; EUR 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid model

Maxon academy

Cobee program

Club Natació de Barcelona membership

Job summary

maxon is seeking a DevOps Security Engineer to be the security anchor of its on-premise OpenShift platform. You will secure the build and run processes, shape the security stack, and work closely with a small platform engineering team in Switzerland while based in Barcelona.

The role is hybrid (3 days in the office, 2 remote) with regular on-site weeks in Switzerland. You will define security baselines, automate checks, and drive remediation with development teams.

Qualifications

• 3+ years of hands-on experience in DevSecOps or container-platform security.
• Experience securing OpenShift or a comparable enterprise Kubernetes distribution in production.
• Hands-on experience building security gates into CI/CD pipelines.
• Confident with GitOps, policy as code, container image scanning and secrets management.
• Scripting in Python, Bash or PowerShell; understanding of the SDLC.
• Knowledge of security frameworks such as OWASP, ISO 27001 or CIS Benchmarks.
• Enjoy coaching developers and turning security topics into practical guidance.
• Able to work with colleagues in another location and spend on-site weeks in Switzerland.

Responsibilities

• Build security into CI/CD pipelines and GitOps deployments for OpenShift.
• Define security baseline for OpenShift clusters and verify continuously.
• Support development teams with threat modeling and secure coding guidance.
• Run vulnerability management for the container platform and drive remediation with teams.
• Turn ISO 27001 requirements into automated checks in the pipeline.
• Automate security response in the pipeline and trigger rollbacks when needed.
• Document platform security runbooks and build deputy capability with engineers.

Skills

DevSecOps

OpenShift security

GitOps

CI/CD security gates

Scripting (Python/Bash/PowerShell)

Security frameworks (OWASP, ISO 27001)

Education

Bachelor's degree in Computer Science

Tools

OpenShift

Kubernetes

Container image scanning

Job description

apeirum is recruiting on behalf of maxon for a DevOps Security Engineer in Barcelona. This is a permanent position employed directly by maxon; apeirum runs the selection process.

maxon is a global provider of world-class precision drive systems. Its drives are used wherever extreme precision and the highest quality standards matter – on Earth, and on Mars. maxon offers creative minds and passionate doers a global yet trusted environment, where people who question what is possible and challenge themselves can grow.

As DevOps Security Engineer you join maxon's Group Software Development as the full-time security anchor of its on-premise OpenShift platform. You secure how software is built and run – from the first commit to the running container – and keep the platform hardened, compliant and resilient. You work every day with a small platform engineering team at maxon's Swiss headquarters (GitOps, four-eyes reviews, a fixed weekly sync), and in Barcelona you share the office with maxon's Cloud Security Engineer. Several tool decisions are still open: you will shape the security stack rather than inherit it. Hybrid in Barcelona (3 days office, 2 remote), with regular on-site weeks in Switzerland (approx. 5–10 %, more during onboarding).

Tasks

• Build security into the CI/CD pipelines and GitOps deployments to OpenShift: static analysis, dependency and secrets scanning, container image scanning and image integrity checks – running as smoothly as every other quality gate.

• Define the security baseline for the OpenShift clusters (Security Context Constraints, RBAC, network policies, admission control, compliance profiles), implement it as GitOps changes reviewed by the platform engineers, and verify it continuously.

• Support development teams early: threat modeling, security user stories, secure-coding guidance and training.

• Run vulnerability management for the container platform: advisories, registry and runtime scan results, scoping application penetration tests and driving remediation with the teams.

• Turn ISO 27001 requirements and group security policies into automated checks, so audit evidence comes out of the pipeline instead of a spreadsheet.

• Automate the pipeline side of security response – blocking vulnerable releases, triggering rollbacks, feeding findings into the central incident and vulnerability process.

• Document the platform's security runbooks and build up deputy capability for cluster operations together with the platform engineers.

Requirements – must have

• 3+ years of hands‑on experience in DevSecOps or container‑platform security.

• Experience securing OpenShift or a comparable enterprise Kubernetes distribution in production – or a strong Kubernetes background and the drive to go deep on OpenShift quickly.

• Hands‑on experience building security gates into CI/CD pipelines.

• Confident with GitOps, policy as code, container image scanning and secrets management – tool‑agnostic, because you know the principles behind the products.

• Scripting in Python, Bash or PowerShell; a solid understanding of the software development lifecycle.

• Knowledge of security frameworks such as OWASP, ISO 27001 or CIS Benchmarks.

• You enjoy coaching developers and turning security topics into practical guidance.

• You work well with colleagues in another location – written, asynchronous and structured – and like spending on‑site weeks with the team in Switzerland.

• University degree in computer science or comparable vocational training.

• Fluent English.

• Based in Spain (Barcelona).

Nice to have

• German – a real advantage for working with the Swiss platform team.

• Red Hat certifications (e.g. OpenShift Administration or Security specialisations).

• Software supply‑chain security (SBOM, signing, attestation).

• Azure fundamentals.

What maxon offers

• A permanent employment contract directly with maxon, competitive compensation based on your experience, flexible annual working hours and a hybrid model.

• Real ownership: you are the full‑time security anchor of the container platform and influence open tool decisions.

• A dynamic and friendly workplace in maxon's Barcelona tech hub, combining startup energy with the stability of a Swiss industrial leader.

• International collaboration with teams in Switzerland and other locations, including regular on‑site weeks at the Swiss headquarters.

• Continuous learning and growth through the maxon academy and professional development programs.

• Additional benefits such as Club Natació de Barcelona membership and the Cobee program.