Devsecops Security Architect

NTT DATA Europe & Latam; Santiago de Compostela; Presencial; EUR 30.000 - 50.000; Jornada completa

Descripción de la vacante

An international IT services provider in Santiago de Compostela is seeking a proactive DevSecOps specialist. The role focuses on integrating security within the software development lifecycle, automating controls, and maintaining compliance with best practices. Candidates should have experience with tools like Kafka, GitLab CI, and Prometheus. This position offers opportunities for professional growth and participation in innovative projects within a multicultural environment.

Servicios

Professional development opportunities

Inclusive work environment

Competitive benefits package

Formación

• Experience handling Apache Kafka and cloud environments.
• Knowledge of CI/CD pipelines and automation.
• Familiarity with security tools and compliance standards.

Responsabilidades

• Design and automate software delivery via CI/CD pipelines.
• Implement and manage security solutions in cloud environments.
• Monitor and respond to security threats and incidents.

Conocimientos

Kafka Ops

CI / CD

Monitoring & Observability

Security

Other Tools

Herramientas

GitLab CI

Jenkins

Prometheus

Docker

Descripción del empleo

About the Company :

NTT DATA strives to hire exceptional, innovative, and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.

About the Role :

We are looking for a talented and proactive DevSecOps specialist. Main responsibility will be to embed security into the software development lifecycle, automate controls, and ensure applications, pipelines, and platforms remain secure and compliant with best practices and regulatory standards.

Key Responsibilities :

• Design and automate software delivery via CI / CD pipelines (build, test, deploy).
• Enforce secure configurations (mTLS, RBAC) and ensure data protection compliance.
• Integrate tools for SAST, DAST, SCA, and container image scanning.
• Contribute to the implementation of security controls in both cloud and on-prem environments (AWS, Azure, Kubernetes, OpenShift).
• Implement and manage secrets management and IAM solutions (Delinea Secret Server and granular RBAC).
• Design, deploy, and automate security checks in cloud environments within infrastructure-as-code (IaC).
• Support technical audits, vulnerability assessments, and remediation plans.
• Monitor threats, logs, and alerts for Kafka and backend services.
• Implement logging, observability, and traceability across the stack.

Requirements : Mandatory :

• Kafka Ops : Apache Kafka, Confluent, Strimzi, Zookeeper, Kafka Connect. Experience handling multiple clusters in the cloud, load balancing, and failover.
• CI / CD : GitLab CI, Jenkins, Argo CD, Tekton.
• Monitoring & Observability : Prometheus, Grafana, Loki, ELK stack, Jaeger.
• Security : Cert-manager for mTLS, HashiCorp Vault, OPA, Keycloak.
• Other Tools : GitOps, Kustomize, Docker, Argo Rollouts.

Desired :

• Cloud & IaC : Kubernetes (AKS, EKS, GKE), Terraform, Helm, Azure, Finops is a plus.
• Certifications : CSSLP, CKS, CKA, DevSecOps Foundation.

We Offer :

• Opportunities for professional development and continuous training.
• An inclusive and multicultural work environment.
• Participation in innovative and challenging projects at an international level.
• Competitive benefits package.

If you are passionate about cybersecurity and ready to start your career in an international environment, we invite you to apply and join our team!