DevSecOps Engineer (Policy Automation and Evidence Pipelines) for NATO with security clearance

WLG; Den Haag; On-site; EUR 90,000 - 130,000; Full time

Job summary

WLG in The Hague is seeking a compliance automation engineer to replace traditional audits with live governance, risk and compliance controls expressed as code. You will architect deployment targets, APIs and identity integration to support continuous assurance.

You will build connectors, validate evidence, run tests, and drive remediation through stakeholder reviews, mappings and automation, enabling faster, safer cloud operations.

Qualifications

• A bachelor's degree in a related discipline with three years of related experience.
• Three years across Kubernetes; REST API integration; Python and scripting; CI/CD pipelines.
• Drafting technical data flows.
• Webhooks and the Jira or ServiceNow APIs.
• Microsoft 365 Graph API and Security Center.
• Red-teaming against compliance requirements.
• PowerShell, cloud APIs and JSON.
• OAuth2, OIDC and identity management.
• Documented experience of process analysis and design.

Responsibilities

• Preparing the target container platform: deployment, database, API gateway, networking and configuration.
• Configuring and testing identity integration — role mappings, automated onboarding and access control.
• Standing up and validating connectors that pull compliance, telemetry and software-inventory data from the cloud estate.
• Confirming imported control statuses and evidence arrive, normalise and map correctly.
• Running controlled test changes to prove event-driven updates are detected accurately.
• Wiring the workflows so a failed control raises a ticket by itself.
• Running stakeholder review sessions to test the assumptions and the mappings.
• Tracking issues through to remediation.

Skills

Drafting technical data flows

Red-teaming against compliance

Identity management

OAuth2/OIDC

Process analysis and design

Education

Bachelor's degree in a related discipline

Tools

Kubernetes

REST API integration

Python scripting

CI/CD pipelines

Job description

Point-in-time audits are dying. Somebody has to build what replaces them.

A multinational defence organisation in The Hague, Netherlands is moving from manual audits towards continuous governance, risk and compliance — controls expressed as code, evidence collected automatically, and authorisation that is a live state rather than an annual event. You would be the engineer who makes that run.

What You Would Be Doing

• Preparing the target container platform: deployment, database, API gateway, networking and configuration
• Configuring and testing identity integration — role mappings, automated onboarding and access control
• Standing up and validating connectors that pull compliance, telemetry and software-inventory data from the cloud estate
• Confirming imported control statuses and evidence arrive, normalise and map correctly
• Running controlled test changes to prove event-driven updates are detected accurately
• Wiring the workflows so a failed control raises a ticket by itself
• Running stakeholder review sessions to test the assumptions and the mappings
• Tracking issues through to remediation

What you would bring

• A bachelor's degree in a related discipline with three years of related experience
• Three years across all of: Kubernetes; REST API integration; Python and scripting; CI/CD pipelines
• Drafting technical data flows
• Webhooks and the Jira or ServiceNow APIs
• Microsoft 365 Graph API and Security Center
• Red-teaming against compliance requirements
• PowerShell, cloud APIs and JSON
• OAuth2, OIDC and identity management
• Documented experience of process analysis and design

Nice to have

• Real technical knowledge of how allied organisations achieve interoperability
• A working understanding of defence cloud strategy
• ITIL, COBIT or an equivalent

Why this one is worth a look

Compliance engineering is where cloud, security and automation meet, and very few people have done it at this scale. This is a build, not a maintenance post.