DevSecops Engineer

Comptech Associates; A distancia; EUR 60.000 - 80.000; Jornada completa

Descripción de la vacante

A leading technology firm is seeking a DevSecOps Engineer to design and implement secure CI/CD pipelines in Madrid, Spain. The ideal candidate will have expertise in integrating security within development workflows and automating infrastructure with modern tools. Responsibilities include collaborating with teams to strengthen security practices throughout the software development lifecycle. This is a remote role for a duration of 12 months, aimed at individuals with strong automation and cloud skills.

Formación

• Experience building enterprise-grade CI/CD pipelines.
• Proficient in version control and security integration tools.
• Strong understanding of Infrastructure as Code (IaC) concepts.

Responsabilidades

• Design, implement, and maintain secure CI/CD pipelines.
• Integrate security scanning and compliance checks.
• Automate infrastructure provisioning and application deployment.

Conocimientos

CI/CD pipelines

GitHub

Jenkins

SonarQube

Fortify

Ansible

Puppet

Bash

Python

Groovy

AWS services

Docker

Openshift

Helm

Herramientas

Terraform

CloudFormation

GitHub Actions

Jenkins

Descripción del empleo

About the Role:

Role: DevSecops Engineer

Location: Madrid, Spain (Remote)

Duration: 12 Months

Project, Role and Task Descriptions:

• Design, implement, and maintain secure CI/CD pipelines for application build, test, and deployment.
• Integrate security scanning, compliance checks, and vulnerability management into development and deployment workflows.
• Automate infrastructure provisioning, configuration, and application deployment using modern DevSecOps tools.
• Collaborate with development, QA, security, and operations teams to ensure security is embedded throughout the SDLC.
• Support and enhance containerization, orchestration, and cloud environments with a strong focus on security best practices.

Candidate Must-Have Skills, Requirements and Nice-to-Have Skills:

• CI/CD, Version Control & Security Integration: Experience building enterprise-grade CI/CD pipelines. GitHub (branching, PR workflows, GitHub Actions), GitHub Actions (secure workflows, secrets management, runner configuration), Jenkins (scripted/declarative pipelines, shared libraries), SonarQube (code quality, SAST), Fortify (static code analysis, security scanning). Experience setting up artifact repositories (Nexus, JFrog, ECR)
• Configuration Management & Automation: Ansible (roles, playbooks, secure inventory handling). Puppet (manifests, modules, environment management). Strong understanding of Infrastructure as Code (IaC) concepts and tooling (Terraform or CloudFormation).
• Scripting & Development: Bash, Python, Groovy (both for Jenkins and development). Ability to write automation scripts.
• Cloud: EC2, S3, IAM (roles, policies, least privilege), VPC networking basics, AWS CloudWatch, SSM, ECS/EKS
• Nice to have: Docker, Openshift, Helm