DevSecOps Engineer

Atos; Maastricht; On-site; EUR 65,000 - 90,000; Full time

Job summary

Atos in the Netherlands is seeking an experienced DevSecOps Engineer to join its engineering team and help maintain its standardised, in-house DevSecOps toolchain used across software groups.

You will support migrations to the platform, extend it for secure software delivery to restricted environments, and ensure compliance with emerging cybersecurity regulations as part of a hands-on role at the intersection of software delivery, security and compliance.

Qualifications

• Proven DevSecOps/DevOps experience in a platform engineering role.
• Strong CI/CD skills and artifact management (Nexus/Artifactory).
• Experience SBOM generation, software composition analysis, and SAST tooling.
• Good understanding of secure software supply chain practices and vulnerability management.
• Scripting and automation skills (Python, Bash, Groovy) and IaC experience.
• Experience with Atlassian tools and ITSM systems (Jira, Confluence, BMC Remedy/Helix) including integrations.
• Ability to work with development teams, communicate clearly and coordinate with several stakeholders.
• Fluent English, written and spoken.

Responsibilities

• Support existing products on the DevSecOps platform.
• Onboard new products and guide migration.
• Maintain and evolve the platform’s release and deployment components, incl. Helix upgrade and Atlassian Cloud migration.
• Design and implement new components for secure artefact transfer and promotion to restricted environments.
• Produce SBOMs and implement static analysis (SAST) in CI/CD pipelines.
• Monitor platform components, identify risks and address issues.
• Review priorities and coordinate with teams.
• Document solutions and share knowledge with development teams.

Skills

DevSecOps

CI/CD pipelines

Artifact management

SBOM generation

SAST tooling

Secure supply chain

Scripting (Python/Bash/Groovy)

Infrastructure as Code

Atlassian tools

Stakeholder coordination

English fluency

Education

Degree or equivalent

Tools

Jenkins

GitLab CI

Nexus/Artifactory

Jira/Confluence

BMC Remedy/Helix

Docker

Kubernetes

Job description

Duration: Up to 5 years (initial 2 years, then 1+1+1 extensions)

Reference: Required before onboarding

About the Role

Our client is looking for an experienced DevSecOps Engineer to join its engineering team and help maintain and evolve its standardised, in-house DevSecOps toolchain. The toolchain is the common development platform used by the organisation’s software teams to build, secure and deliver their products.

You will support development teams in migrating to the platform, extend it to deliver software packages securely to more restricted environments, and help ensure that software products comply with new cybersecurity regulations. This is a hands‑on role at the intersection of software delivery, security and compliance.

Business Context

Several upcoming programmes are shaping the work ahead:

• Ongoing projects require software packages to be delivered securely to more restricted network environments, which calls for additional components and implementation on top of the existing platform.
• The organisation is upgrading its IT service management system to the new BMC Helix, and the platform’s integration components must be adapted accordingly.
• Tooling is being migrated to Atlassian Cloud.
• The EU regulation on information security (Part-IS, Commission Implementing Regulation 2023/203) comes into force in 2026. Compliance in the area of vulnerability management requires Software Bills of Materials (SBOM) and static source code analysis for all relevant subsystems.

Key Responsibilities

• Support existing products running on the DevSecOps platform and resolve issues raised by development teams.
• Onboard new products and teams onto the platform, guiding them through migration.
• Maintain and evolve the platform’s release and deployment components, including adapting them for the Helix/Remedy upgrade and the Atlassian Cloud migration.
• Design and implement new components for secure artefact transfer and promotion to more restricted environments.
• Produce SBOMs and implement static source code analysis in CI/CD pipelines to support regulatory compliance.
• Monitor platform components, identify risks and obstacles, and make sure product‑related problems are addressed.
• Review priorities, make recommendations, take part in decision‑making and coordinate with the relevant teams.
• Document solutions and share knowledge with development teams.

Required Qualifications

• Proven experience in a DevSecOps, DevOps or platform engineering role.
• Strong knowledge of CI/CD pipelines and tooling (for example Jenkins, GitLab CI or similar) and of artefact repository management (for example Nexus or Artifactory).
• Experience with SBOM generation, software composition analysis and static application security testing (SAST).
• Good understanding of secure software supply chain practices and vulnerability management.
• Scripting and automation skills (for example Python, Bash, Groovy) and experience with infrastructure as code.
• Experience with Atlassian tools and ITSM systems (Jira, Confluence, BMC Remedy/Helix or similar), including integrations.
• Ability to work with development teams, communicate clearly and coordinate with several stakeholders.
• Fluent English, written and spoken.
• [Degree level or equivalent experience].
• Eligibility to work with the client and to pass the required security vetting, with nationality criteria as per the client’s rules.

Nice to Have

• Familiarity with cybersecurity regulation and standards (Part-IS, ISO 27001, IEC 62443 or similar).
• Experience delivering software to segregated, air‑gapped or highly restricted environments.
• Experience with containers and orchestration (Docker, Kubernetes) and with messaging platforms such as Kafka.
• Experience in regulated or safety‑critical sectors such as aviation, transport, energy or public administration.