DevOps Security Engineer – OpenShift

Apeirum GmbH; Bellprat; Híbrido; EUR 80.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Permanent contract

Ownership of security platform

Professional development and maxon-acl

Club Natació de Barcelona membership

Cobee program

Descripción de la vacante

maxon is hiring a DevOps Security Engineer in Barcelona to be the security anchor of its on-prem OpenShift platform. You will shape the security stack and work with Swiss colleagues on security governance.

You will secure how software is built and run, integrate security into pipelines, and drive automated checks to support ISO 27001 and CIS benchmarks. This role requires an international mindset and regular on-site weeks in Switzerland.

Formación

• 3+ years hands-on DevSecOps or container security.
• Experience securing OpenShift or enterprise Kubernetes in production.
• Hands-on experience building security gates into CI/CD pipelines.
• Confident with GitOps, policy as code, container image scanning and secrets management.
• Scripting in Python, Bash or PowerShell; understanding of SDLC.
• Knowledge of OWASP, ISO 27001 or CIS Benchmarks.
• Enjoy coaching developers and turning security topics into practical guidance.
• Willing to spend on-site weeks with the team in Switzerland.
• University degree in computer science or comparable vocational training.
• Fluent English.
• Based in Spain (Barcelona).

Responsabilidades

• Build security into the CI/CD pipelines and GitOps deployments to OpenShift.
• Define the security baseline for the OpenShift clusters (SCAs, RBAC, network policies, admission control, compliance profiles).
• Support development teams with threat modeling, security user stories, secure-coding guidance and training.
• Run vulnerability management for the container platform; advisories, registry and runtime scan results, remediation.
• Turn ISO 27001 requirements into automated checks in the pipeline to generate audit evidence.
• Automate the pipeline side of security response – blocking vulnerable releases and rollbacks.
• Document the security runbooks and build deputy capability for cluster operations.

Conocimientos

DevSecOps

OpenShift

Kubernetes

GitOps

CI/CD security

Scripting

Security frameworks

Coaching

English

Educación

CS degree or equivalent

Herramientas

OpenShift

Kubernetes

Descripción del empleo

apeirum is recruiting on behalf of maxon for a DevOps Security Engineer in Barcelona. This is a permanent position employed directly by maxon; apeirum runs the selection process.

maxon is a global provider of world-class precision drive systems. Its drives are used wherever extreme precision and the highest quality standards matter – on Earth, and on Mars. maxon offers creative minds and passionate doers a global yet trusted environment, where people who question what is possible and challenge themselves can grow.

As DevOps Security Engineer you join maxon's Group Software Development as the full-time security anchor of its on-premise OpenShift platform. You secure how software is built and run – from the first commit to the running container – and keep the platform hardened, compliant and resilient. You work every day with a small platform engineering team at maxon's Swiss headquarters (GitOps, four-eyes reviews, a fixed weekly sync), and in Barcelona you share the office with maxon's Cloud Security Engineer. Several tool decisions are still open: you will shape the security stack rather than inherit it. Hybrid in Barcelona (3 days office, 2 remote), with regular on-site weeks in Switzerland (approx. 5–10 %, more during onboarding).

Tasks

• Build security into the CI/CD pipelines and GitOps deployments to OpenShift: static analysis, dependency and secrets scanning, container image scanning and image integrity checks – running as smoothly as every other quality gate.

• Define the security baseline for the OpenShift clusters (Security Context Constraints, RBAC, network policies, admission control, compliance profiles), implement it as GitOps changes reviewed by the platform engineers, and verify it continuously.

• Support development teams early: threat modeling, security user stories, secure-coding guidance and training.

• Run vulnerability management for the container platform: advisories, registry and runtime scan results, scoping application penetration tests and driving remediation with the teams.

• Turn ISO 27001 requirements and group security policies into automated checks, so audit evidence comes out of the pipeline instead of a spreadsheet.

• Automate the pipeline side of security response – blocking vulnerable releases, triggering rollbacks, feeding findings into the central incident and vulnerability process.

• Document the platform's security runbooks and build up deputy capability for cluster operations together with the platform engineers.

Requirements – must have

• 3+ years of hands‑on experience in DevSecOps or container‑platform security.

• Experience securing OpenShift or a comparable enterprise Kubernetes distribution in production – or a strong Kubernetes background and the drive to go deep on OpenShift quickly.

• Hands‑on experience building security gates into CI/CD pipelines.

• Confident with GitOps, policy as code, container image scanning and secrets management – tool‑agnostic, because you know the principles behind the products.

• Scripting in Python, Bash or PowerShell; a solid understanding of the software development lifecycle.

• Knowledge of security frameworks such as OWASP, ISO 27001 or CIS Benchmarks.

• You enjoy coaching developers and turning security topics into practical guidance.

• You work well with colleagues in another location – written, asynchronous and structured – and like spending on‑site weeks with the team in Switzerland.

• University degree in computer science or comparable vocational training.

• Fluent English.

• Based in Spain (Barcelona).

Nice to have

• German – a real advantage for working with the Swiss platform team.

• Red Hat certifications (e.g. OpenShift Administration or Security specialisations).

• Software supply‑chain security (SBOM, signing, attestation).

• Azure fundamentals.

What maxon offers

• A permanent employment contract directly with maxon, competitive compensation based on your experience, flexible annual working hours and a hybrid model.

• Real ownership: you are the full‑time security anchor of the container platform and influence open tool decisions.

• A dynamic and friendly workplace in maxon's Barcelona tech hub, combining startup energy with the stability of a Swiss industrial leader.

• International collaboration with teams in Switzerland and other locations, including regular on‑site weeks at the Swiss headquarters.

• Continuous learning and growth through the maxon academy and professional development programs.

• Additional benefits such as Club Natació de Barcelona membership and the Cobee program.