DevSecOps Engineer (Policy Automation and Evidence Pipelines) for NATO with security clearance

Wlgroup; Den Haag; On-site; EUR 90,000 - 130,000; Full time

Job summary

Wlgroup in The Hague seeks an experienced compliance engineer to replace traditional audits by building continuous governance, risk and compliance controls as code. You will deploy and configure the container platform, integrate identity, and connect cloud data sources to automate validation and remediation.

The role emphasizes event-driven updates, automated ticketing, and hands-on testing with Jira/ServiceNow APIs, OAuth2/OIDC, and PowerShell, requiring a strong background in Kubernetes, REST

Qualifications

• Bachelor's degree in a related discipline is required.
• At least 3 years of related experience in governance, risk, and compliance roles.

Responsibilities

• Prepare the target container platform: deployment, database, API gateway, networking and configuration.
• Configure and test identity integration — role mappings, automated onboarding and access control.
• Stand up and validate connectors pulling compliance, telemetry and software-inventory data from the cloud estate.
• Confirm imported control statuses and evidence arrive, normalise and map correctly.
• Run controlled test changes to prove event-driven updates are detected accurately.
• Wire workflows so a failed control raises a ticket automatically.
• Run stakeholder review sessions to test assumptions and mappings.
• Track issues through to remediation.

Skills

Kubernetes

REST API integration

Python

Scripting

CI/CD pipelines

Technical data flows

Webhooks

Jira API

ServiceNow API

Microsoft 365 Graph API

OAuth2/OIDC

Identity management

JSON

PowerShell

Cloud APIs

Education

Bachelor's degree in a related discipline

Tools

Kubernetes

REST APIs

Python

CI/CD

Job description

Point-in-time audits are dying. Somebody has to build what replaces them.

A multinational defence organisation in The Hague, Netherlands is moving from manual audits towards continuous governance, risk and compliance — controls expressed as code, evidence collected automatically, and authorisation that is a live state rather than an annual event. You would be the engineer who makes that run.

What you would be doing

• Preparing the target container platform: deployment, database, API gateway, networking and configuration
• Configuring and testing identity integration — role mappings, automated onboarding and access control
• Standing up and validating connectors that pull compliance, telemetry and software-inventory data from the cloud estate
• Confirming imported control statuses and evidence arrive, normalise and map correctly
• Running controlled test changes to prove event-driven updates are detected accurately
• Wiring the workflows so a failed control raises a ticket by itself
• Running stakeholder review sessions to test the assumptions and the mappings
• Tracking issues through to remediation

What you would bring

• A bachelor's degree in a related discipline with three years of related experience
• Three years across all of: Kubernetes; REST API integration; Python and scripting; CI/CD pipelines
• Drafting technical data flows
• Webhooks and the Jira or ServiceNow APIs
• Microsoft 365 Graph API and Security Center
• Red-teaming against compliance requirements
• PowerShell, cloud APIs and JSON
• OAuth2, OIDC and identity management
• Documented experience of process analysis and design

Nice to have

• Real technical knowledge of how allied organisations achieve interoperability
• A working understanding of defence cloud strategy
• ITIL, COBIT or an equivalent

Why this one is worth a look

Compliance engineering is where cloud, security and automation meet, and very few people have done it at this scale. This is a build, not a maintenance post.