CDI - Software Factory & DevSecOps Architect M/F

Rely; France; Hybride; EUR 90 000 - 130 000; Plein temps

Résumé du poste

Rely is seeking a Software Factory & DevSecOps Architect to design and operate a secure, reproducible software factory across CI/CD, artifact signing, SBOM and release gates. You will enable T1/T2/T3 components to be developed, tested, signed, packaged and released with robust evidence automation.

You will implement conformance-CI, maintain developer environments and tooling, and drive automation that improves productivity while preserving security and release discipline across the platform.

Qualifications

• 5+ years in DevSecOps, build and release engineering, software factory, platform engineering or secure software supply-chain environments.

Responsabilités

• Build and operate CI/CD pipelines across T1, T2 and T3 with reproducible builds.
• Implement artifact signing, release gates, SBOM automation and secure supply-chain controls.
• Operate conformance-CI for autonomy components and platform regression checks.
• Maintain developer environments, build tooling, release dashboards and integration support.
• Automate evidence production for cyber, safety, software quality and V&V reviews.
• Improve developer productivity while preserving security and release discipline.

Connaissances

CI/CD

Release engineering

Linux and containers

Infrastructure as Code

Code signing

SBOM and supply-chain security

Developer productivity tooling

Automation mindset

Service orientation

Reliability focus

Security awareness

Pragmatism

Support culture

Description du poste

CDI - Software Factory & DevSecOps Architect M/F

Key objective — Make secure, reproducible and evidence-generating software delivery the default way of working across T1/T2/T3.

Mission

Build the software factory that enables T1/T2/T3 components to be developed, tested, signed, packaged and released in a reproducible and secure way. The mission covers CI/CD, artifact signing, SBOM, release gates, developer environments, cyber/safety/V&V evidence automation and delivery discipline.

• Build and operate CI/CD pipelines across T1, T2 and T3 with reproducible builds.
• Implement artifact signing, release gates, SBOM automation and secure supply-chain controls.
• Operate conformance-CI for autonomy components and platform regression checks.
• Maintain developer environments, build tooling, release dashboards and integration support.
• Automate evidence production for cyber, safety, software quality and V&V reviews.
• Improve developer productivity while preserving security and release discipline.

Skills

• CI/CD;
• release engineering;
• Linux and containers;
• Infrastructure as Code;
• code signing;
• SBOM and supply-chain security;
• developer productivity tooling.
• Automation mindset;
• service orientation;
• reliability focus;
• security awareness;
• pragmatism;
• support culture.

Education & experience

5+ years in DevSecOps, build and release engineering, software factory, platform engineering or secure software supply-chain environments.

Success criteria after 12 months

CI/CD baseline operational; artifact-signing approach selected; SBOM automation started; developer environments documented; first controlled release pipeline usable.