DevSecOps Architect / Technical Lead

Solid Company; Polska; On-site; PLN 220,000 - 320,000; Full time

Job summary

Andersen is seeking a DevSecOps Architect / Technical Lead to modernize digital banking architecture, enhance security, scalability and platform reliability. The role translates strategy into practical CI/CD roadmaps and implements reusable security standards across cloud native environments.

The position requires hands-on Azure expertise, experience with Azure DevOps or similar, Kubernetes/AKS, IaC with Terraform, and integrating scanners and SBOMs into pipelines.

Qualifications

• 5+ years of experience in DevSecOps or platform security.
• Strong hands-on experience with Microsoft Azure.
• Experience with Azure DevOps or comparable CI/CD platforms.
• Experience designing secure CI/CD pipelines.
• Knowledge of Kubernetes security, preferably AKS.
• Terraform or IaC experience.
• Identity, secrets and certificate management knowledge.
• English level at least Upper-Intermediate.

Responsibilities

• Translating the DevSecOps master plan into a practical implementation roadmap.
• Defining reusable CI/CD, security and release-management standards.
• Supporting the transition from Bitbucket/Jenkins to Azure Repos and Azure Pipelines.
• Implementing security scanning and release gates in CI/CD pipelines.
• Configuring security controls for AKS, container images, identities and secrets.
• Establishing artifact signing, SBOM generation and secure promotion processes.
• Integrating platform security events with monitoring and SIEM solutions.

Skills

DevSecOps

Azure

Azure DevOps

CI/CD

Kubernetes

Terraform

Security Scanning

Identity Management

English Proficiency

Tools

Azure Repos

Azure Pipelines

Bitbucket

Jenkins

AKS

SonarQube

OWASP ZAP

Checkov

Job description

Andersen is hiring a DevSecOps Architect / Technical Lead for a project modernizing digital banking architecture and enhancing security, scalability, and platform reliability.

The customer is a financial services organization providing banking products and digital solutions for individual and business clients. The company operates through an established service network and online platforms and is part of a larger international financial group, supporting ongoing development of its services for a broad client base.

Responsibilities:

• Translating the DevSecOps master plan into a practical implementation roadmap.
• Defining reusable CI/CD, security and release-management standards.
• Supporting the transition from Bitbucket/Jenkins to Azure Repos and Azure Pipelines.
• Implementing security scanning and release gates in CI/CD pipelines.
• Configuring security controls for AKS, container images, identities and secrets.
• Establishing artifact signing, SBOM generation and secure promotion processes.
• - Integrating platform security events with the bank's monitoring and SIEM solutions.

Your personal data is protected in accordance with GDPR regulations. Learn more: Prosimy o zapoznanie się z Polityką Prywatności firmy Andersen.

Join us!

Kogo poszukujemy?

Requirements:

• Experience in DevSecOps, cloud security or platform security for 5+ years.
• Strong hands-on experience with Microsoft Azure.
• Practical experience with Azure DevOps or comparable enterprise CI/CD platforms.
• Experience designing and implementing secure CI/CD pipelines.
• Experience integrating security scanners and quality gates into pipelines.
• Practical knowledge of Kubernetes and container security, preferably AKS.
• Experience with Infrastructure as Code, preferably Terraform.
• Knowledge of identity, secrets and certificate management.
• Understanding of SAST, SCA, DAST, secret scanning, IaC scanning and container scanning.
• Ability to combine solution design and technical leadership with hands-on implementation.
• Strong communication and documentation skills.
• Level of English – from Upper-Intermediate and above.

Nice-to-haves:

• Experience in the banking domain.
• Experience with Jenkins, Bitbucket and migration to Azure DevOps.
• Experience with Azure Key Vault, Azure Container Registry and Defender for Containers.
• Familiarity with tools such as SonarQube, Sonatype, Nexus, Gitleaks, Checkov or OWASP ZAP.
• Understanding of SBOM, artifact signing and software supply-chain security.