Senior Engineer (DevSecOps)

Brevco Services; Brunssum; Remote; EUR 90,000 - 120,000; Full time

Job summary

Brevco Services is seeking an experienced contractor to plan, design, implement and deploy DevSecOps solutions across CIS environments. You will build and maintain automation pipelines, develop IaC, and ensure secure deployment practices with strong documentation and governance.

Responsibilities include system integration, testing, migration support, and producing artefacts. Collaboration with security stakeholders and project teams is essential to deliver secure, scalable CIS capabilities.

Qualifications

• Bachelor's degree or equivalent in a related discipline (Mandatory).
• 5 years experience in DevSecOps, DevOps, software engineering, platform engineering or infrastructure automation (Mandatory).
• Experience with on‑premises CIS environments, data centres and mission‑critical systems (Mandatory).
• Experience designing and maintaining DevSecOps pipelines in secure, on‑premises environments (Mandatory).
• Experience integrating security controls across the SDLC (Mandatory).
• Experience supporting containerized and cloud‑native technologies in on‑prem environments (Mandatory).
• Experience implementing Infrastructure as Code and automation (Mandatory).
• Experience working in military/government/mission‑critical environments is desirable (Mandatory).
• Experience producing technical docs and handover artefacts (Mandatory).
• Expertise in CI/CD and automation tools (Mandatory).
• Containerization and platform technologies (Mandatory).
• Cybersecurity and Secure Development (Mandatory).
• SAST/DAST/SCA and vulnerability management (Mandatory).
• Linux/Windows Server; virtualization and infra services (Mandatory).
• Monitoring/Observability (Mandatory).

Responsibilities

• Plan, design, implement, integrate, validate and deploy DevSecOps solutions across CIS environments.
• Develop technical designs, install/configure DevSecOps components and perform system integration.
• Produce technical documentation, deployment procedures and security artefacts.
• Provide regular service reports with status, risks, issues and milestones.
• Coordinate with architects, security stakeholders and authorities for fit-for-purpose solutions.
• Ensure solutions are interoperable, secure and scalable for current/future needs.
• Demonstrate progress against project plans and deliverables.
• Identify risks, dependencies and mitigation actions; support governance activities.

Skills

DevSecOps

CI/CD

Infrastructure as Code

Containerization (Docker/Kubernetes)

Programming/Scripting (Python/Bash/PS)

Security in SDLC

Documentation

Education

Bachelor's degree in Computer Science or related

Tools

Terraform

Ansible

Puppet

Docker

Kubernetes

GitLab/Jenkins/Azure DevOps

Prometheus/Grafana

Job description

All the mandatory requirements have to be met in order to apply.

• Bachelors degree in Computer Science, Software Engineering, Information Technology, Cybersecurity, Engineering or a related discipline or an equivalent combination of education and professional experience.
• 5 years experience in DevSecOps, DevOps, software engineering, platform engineering or infrastructure automation roles.
• Experience supporting on-premises CIS environments, including enterprise data centres, mission‑critical infrastructure and operational systems
• Experience designing, implementing and maintaining DevSecOps pipelines and automation frameworks in secure, on‑premises environments
• Experience integrating security controls and compliance requirements throughout the software development lifecycle (SDLC)
• Experience supporting containerized and cloud‑native technologies deployed in on‑premises environments
• Experience implementing Infrastructure as Code (IaC), configuration management and automated deployment solutions. Experience working within military, defence, government or mission‑critical operational environments is desirable
• Experience producing technical documentation, deployment procedures, architecture diagrams, security artefacts and operational handover documentation
• Expertise/experience in several of the following areas:
  • DevSecOps and CI/CD
  • Designing, implementing and maintaining Continuous Integration and Continuous Delivery/Deployment (CI/CD) pipelines. DevSecOps principles and practices, including secure software delivery and automated security testing
  • CI/CD platforms such as GitLab, Jenkins, Azure DevOps or equivalent
  • Integrating automated build, testing, deployment and security validation processes
  • Infrastructure as Code and Automation
  • Developing and maintaining Infrastructure as Code (IaC) solutions
  • Tools such as Terraform, Ansible, Puppet or equivalent. Automating infrastructure provisioning, configuration management and deployment processes
  • Scripting and automation using Python, Bash, PowerShell or similar
  • Containerization and Platform Technologies
  • Deploying and supporting containerized applications and services. Container technologies such as Docker and orchestration platforms such as Kubernetes
  • Container security, image management and container lifecycle management
  • Platform engineering concepts and modern application deployment architectures
  • Cybersecurity and Secure Development
  • Integrating security controls throughout the software development lifecycle
  • Secure coding practices, application security principles and software assurance methodologies
  • Implementing Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA) and vulnerability management processes. Implementing secrets management, identity and access management and secure configuration practices
  • Systems and Infrastructure
  • Supporting Linux and Windows Server environments
  • Virtualization platforms and enterprise infrastructure technologies. Supporting application hosting platforms, middleware, databases and supporting infrastructure services
  • Monitoring, Logging and Observability
  • Implementing monitoring, logging and observability solutions
  • Tools such as Prometheus, Grafana, Elastic or equivalent monitoring platforms
  • Performance monitoring, incident response, troubleshooting and operational reporting
• The proposed contractor shall possess at least one of the following certifications:
  • HashiCorp Certified: Terraform Associate (Mandatory)
  • Docker Certified Associate (DCA)
  • Equivalent industry-recognized DevOps, platform engineering or automation certification. (Mandatory)
• In addition, the contractor shall possess at least one cybersecurity-related certification:
  • CompTIA Security+ (Mandatory)
  • GIAC Security Essentials (GSEC) (Mandatory)
  • ISC2 Certified in Cybersecurity (CC) (Mandatory)
  • Equivalent industry-recognized cybersecurity certificate (Mandatory)

DUTIES/ROLE:

• The Contractor shall perform activities related to the planning, design, implementation, integration, validation, and deployment of DevSecOps solutions across CIS environments. Services shall be delivered in a structured and controlled manner, ensuring alignment with project objectives, technical requirements, implementation schedules, and stakeholder expectations
• The scope includes the development of technical designs, installation and configuration of DevSecOps components, system integration, execution of testing and acceptance activities, support to deployment and migration efforts, and the production of all required technical documentation. The Contractor shall contribute to technical coordination, risk identification and mitigation, quality assurance, and project governance activities to ensure the successful delivery of CIS capabilities
• The Contractor shall work closely with project teams, architects, security stakeholders, and operational authorities to ensure that delivered solutions are fit for purpose, interoperable, secure, and capable of supporting current and future operational requirements. The Contractor shall provide regular service reports detailing the status and progress of assigned CIS and DCIS project activities. Reports shall provide visibility of project execution, technical achievements, risks, issues, and planned activities to support effective project governance and decision‑making
• The service reports shall include, as a minimum:
  • Progress against agreed project plans, milestones, and deliverables
  • Status of design, integration, configuration, testing, deployment, and migration activities
  • Achievement of key project objectives and technical deliverables
  • Identification of project risks, issues, dependencies, and proposed mitigation actions
  • Summary of completed activities during the reporting period
  • Planned activities and milestones for the upcoming reporting period
  • Status of technical documentation, design artefacts, and acceptance deliverables
  • Quality assurance activities performed and any identified non‑conformities
  • Resource utilisation and effort expended against assigned tasks, where required
  • Escalations, decisions, or support required from NCIA stakeholders

Job requirements

• Bachelors degree in Computer Science, Software Engineering, Information Technology, Cybersecurity, Engineering or a related discipline or an equivalent combination of education and professional experience (Mandatory)
• 5 years experience in DevSecOps, DevOps, software engineering, platform engineering or infrastructure automation roles (Mandatory)
• Experience supporting on-premises CIS environments, including enterprise data centres, mission‑critical infrastructure and operational systems (Mandatory)
• Experience designing, implementing and maintaining DevSecOps pipelines and automation frameworks in secure, on‑premises environments (Mandatory)
• Experience integrating security controls and compliance requirements throughout the software development lifecycle (SDLC) (Mandatory)
• Experience supporting containerized and cloud‑native technologies deployed in on‑premises environments (Mandatory)
• Experience implementing Infrastructure as Code (IaC), configuration management and automated deployment solutions (Mandatory)
• Experience working within military, defence, government or mission‑critical operational environments is desirable (Mandatory)
• Experience producing technical documentation, deployment procedures, architecture diagrams, security artefacts and operational handover documentation (Mandatory)
• Expertise/experience in several of the following areas: (Mandatory)
  • DevSecOps and CI/CD
  • Designing, implementing and maintaining Continuous Integration and Continuous Delivery/Deployment (CI/CD) pipelines. DevSecOps principles and practices, including secure software delivery and automated security testing
  • CI/CD platforms such as GitLab, Jenkins, Azure DevOps or equivalent
  • Integrating automated build, testing, deployment and security validation processes
  • Infrastructure as Code and Automation
  • Developing and maintaining Infrastructure as Code (IaC) solutions
  • Tools such as Terraform, Ansible, Puppet or equivalent. Automating infrastructure provisioning, configuration management and deployment processes
  • Scripting and automation using Python, Bash, PowerShell or similar
  • Containerization and Platform Technologies
  • Deploying and supporting containerized applications and services. Container technologies such as Docker and orchestration platforms such as Kubernetes