Compliance Automation Engineer (Kubernetes, CI/CD, Cloud APIs) for NATO with security clearance

Wlgroup; Den Haag; On-site; EUR 75,000 - 110,000; Full time

Job summary

Wlgroup in The Hague is seeking an engineer to replace manual audits with continuous governance, risk and compliance where controls are expressed as code and evidence is collected automatically.

You will build target container platform deployments, integrate identity, stand up connectors, validate data mappings and drive remediation through stakeholder reviews.

Qualifications

• Bachelor's degree in a related discipline with three years of experience.
• Three years across Kubernetes, REST API integration, Python scripting and CI/CD.
• Drafting technical data flows.
• Webhooks and Jira or ServiceNow APIs.
• Microsoft 365 Graph API and Security Center.
• Red-teaming against compliance requirements.
• PowerShell, cloud APIs and JSON.
• OAuth2, OIDC and identity management.
• Documented experience of process analysis and design.

Responsibilities

• Preparing the target container platform: deployment, database, API gateway, networking and configuration
• Configuring and testing identity integration — role mappings, automated onboarding and access control
• Standing up and validating connectors that pull compliance, telemetry and software-inventory data from the cloud estate
• Confirming imported control statuses and evidence arrive, normalise and map correctly
• Running controlled test changes to prove event-driven updates are detected accurately
• Wiring the workflows so a failed control raises a ticket by itself
• Running stakeholder review sessions to test the assumptions and the mappings
• Tracking issues through to remediation

Skills

Kubernetes

REST API integration

Python scripting

CI/CD pipelines

Drafting technical data flows

Red-teaming

OAuth2

OIDC

Identity management

Process analysis

Education

Bachelor's degree in a related discipline

Tools

Jira API

ServiceNow API

PowerShell

Cloud APIs

JSON

Job description

Point-in-time audits are dying. Somebody has to build what replaces them.

A multinational defence organisation in The Hague, Netherlands is moving from manual audits towards continuous governance, risk and compliance — controls expressed as code, evidence collected automatically, and authorisation that is a live state rather than an annual event. You would be the engineer who makes that run.

What you would be doing

• Preparing the target container platform: deployment, database, API gateway, networking and configuration
• Configuring and testing identity integration — role mappings, automated onboarding and access control
• Standing up and validating connectors that pull compliance, telemetry and software-inventory data from the cloud estate
• Confirming imported control statuses and evidence arrive, normalise and map correctly
• Running controlled test changes to prove event-driven updates are detected accurately
• Wiring the workflows so a failed control raises a ticket by itself
• Running stakeholder review sessions to test the assumptions and the mappings
• Tracking issues through to remediation

What you would bring

• A bachelor's degree in a related discipline with three years of related experience
• Three years across all of: Kubernetes; REST API integration; Python and scripting; CI/CD pipelines
• Drafting technical data flows
• Webhooks and the Jira or ServiceNow APIs
• Microsoft 365 Graph API and Security Center
• Red-teaming against compliance requirements
• PowerShell, cloud APIs and JSON
• OAuth2, OIDC and identity management
• Documented experience of process analysis and design

Nice to have

• Real technical knowledge of how allied organisations achieve interoperability
• A working understanding of defence cloud strategy
• ITIL, COBIT or an equivalent

Why this one is worth a look

Compliance engineering is where cloud, security and automation meet, and very few people have done it at this scale. This is a build, not a maintenance post.