Senior IT Platform Engineer

NexGuard (now part of NAGRA); Cesson-Sévigné; Hybride; EUR 70 000 - 110 000; Plein temps

Résumé du poste

Kudelski Group is seeking a Senior DevOps / Platform Engineer at our Rennes site (NexGuard) to standardize and automate CI/CD pipelines across cloud and on-premises environments. You will unify templates for GitLab CI and Azure DevOps, and manage IaC for AWS, Azure and VMware, ensuring performance, security and resilience at group scale.

The role requires strong DevOps experience, expertise in Terraform/Ansible, and hands-on use of VMware and cloud services, with English at B2 level for

Qualifications

• 5+ years of hands-on DevOps/Platform/SRE engineering experience.
• Strong command of GitLab CI pipelines (Azure DevOps appreciated).
• Deep expertise in at least one public cloud (AWS strongly preferred; Azure exposure appreciated).
• Solid Linux administration and scripting (Python, Bash, PowerShell).
• Infrastructure as Code skills: Terraform and Ansible.
• Understanding of security and compliance challenges in regulated environments (ISO 27001, Common Criteria).
• Working-level English (B2) for daily collaboration with global teams.

Responsabilités

• Design, operate and improve CI/CD pipelines for network and system domains on GitLab CI (primary) and Azure DevOps as needed.
• Industrialize and maintain Infrastructure as Code (Terraform, Ansible) for AWS, Azure and VMware environments.
• Operate and evolve the hybrid infrastructure: VMware vSphere/vSAN, AWS, Azure.
• Industrialize secrets and privileged access management through CyberArk and 1Password.
• Build and maintain end-to-end observability (Prometheus, Grafana, Zabbix) across CI/CD pipelines and infrastructure.
• Ensure security and compliance (ISO 27001, Common Criteria) within all owned services.
• Support Dev, Ops and Security teams in adopting DevOps/Platform Engineering best practices.

Connaissances

DevOps

GitLab CI

AWS

Azure

Terraform

Ansible

Linux

Python

Bash/PowerShell

Security & Compliance

English (B2)

Outils

VMware vSphere

vSAN

NSX

GitLab CI

Azure DevOps

Prometheus

Grafana

Zabbix

CyberArk

1Password

Description du poste

Hybrid: 4 days onsite, 1 day work from home

Type: Permanent, Full time

About the company

Kudelski Group is a global leader in digital security technologies, with operations spanning paid-TV solutions, cybersecurity, and IoT. We operate in a multicultural international environment (EMEA, APAC, Americas), with strong security and compliance requirements (ISO 27001 and Common Criteria certifications).

Within the Global IT Technology Services department, we support Business Units and corporate functions in industrializing, automating and securing their hybrid platforms (VMware private cloud + Azure + AWS). Our Rennes site (NexGuard) plays a key role in operating shared engineering infrastructure for the Group.

Mission

As part of the team reorganization and the convergence of our DevOps practices across network and system domains, we are looking for a Senior DevOps / Platform Engineer to unify, streamline and industrialize our CI/CD pipelines while operating our hybrid infrastructure and integrating our identity, secrets and access management tools.

Your core mission: Standardize, automate and optimize our DevOps process with our cloud platforms (AWS, Azure) and on-premises VMware infrastructure, to deliver performance, security and resilience at Group scale.

Key responsibilities

• Design, operate and improve CI/CD pipelines for network and system domains on GitLab CI (primary) and Azure DevOps when relevant, unifying templates and practices across teams.
• Industrialize and maintain Infrastructure as Code (Terraform, Ansible) for AWS, Azure and VMware environments.
• Operate and evolve the hybrid infrastructure: VMware vSphere/vSAN, AWS (managed services, multi account organizations), Azure (Landing Zones, networking).
• Industrialize secrets and privileged access management through CyberArk and 1Password.
• Build and maintain end-to-end observability (Prometheus, Grafana, Zabbix) across CI/CD pipelines and infrastructure.
• Ensure security and compliance (ISO 27001, Common Criteria) within all owned services: secrets management, SAST/DAST scanning, access policies, audit readiness.
• Support Dev, Ops and Security teams in adopting DevOps / Platform Engineering best practices, driving continuous improvement.

Must-have skills

• 5+ years of hands-on experience in DevOps / Platform / SRE Engineering.
• Strong command of GitLab CI pipelines (Azure DevOps appreciated) in international contexts.
• Deep expertise in at least one public cloud (AWS strongly preferred for this role; Azure exposure appreciated).
• Solid Agent-LLM AI and MCP servers experience.
• Operational experience on VMware vSphere and vSAN; NSX exposure is a plus.
• Strong Infrastructure as Code skills: Terraform and Ansible.
• Solid Linux administration and scripting (Python, Bash, PowerShell).
• Understanding of security and compliance challenges in regulated environments (ISO 27001, Common Criteria).
• Working-level English (B2) for daily collaboration with EMEA, APAC and AM teams.

Nice-to-have

• Hands-on exposure to CyberArk (PAM/Vault) and 1Password.
• Knowledge of Global Secure Access (GSA) or other ZTNA solutions.
• Certificates: Azure (AZ-400, AZ-104), AWS Solutions Architect / DevOps Engineer Pro, HashiCorp Terraform Associate, CKA.
• Experience with secure engineering environments (PKI, hardening, advanced backup).
• Autonomous, proactive, service-oriented with strong quality focus.
• Excellent transverse communication; ability to make technical concepts accessible.
• Capacity to align Dev, Ops, Security and international teams.
• Continuous learner, curious about new tools and practices.

Languages

• English: native or B2 minimum (multicultural EMEA / APAC / AM).

What we offer

• Possibility to work at home 1 day per week
• Stimulating international environment with EMEA, APAC and AM exposure.
• Training and certification budget (cloud, security, DevOps).
• Modern tooling and AI-augmented workflows (GitHub Copilot, Microsoft 365 Copilot, internal AI Guild).
• Internal mobility opportunities across the Kudelski Group.