Senior DevSecOps Architect & Tech Lead: Azure & Security

DOU Polska; Warszawa; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Private health insurance and sports

Certification compensation

Referral program

Training portal access

Remote or hybrid work option

Job summary

Andersen is seeking a DevSecOps Architect / Technical Lead to drive a large-scale digital banking modernization. You will define secure CI/CD standards, shape an Azure-centric platform security plan and mentor delivery teams across engineering, security and architecture.

The role offers both remote and office options within a hybrid setup. Key focus areas include SBOM, artifact signing, gate-based release controls, and cross-team security strategy implementation with hands-on execution and

Qualifications

• 5+ years of experience in DevSecOps, cloud security or platform security.
• Experience designing and driving DevSecOps processes across multiple teams.
• Translating security/DevSecOps strategy into practical roadmaps and standards.
• Owning technical decisions and promoting DevSecOps adoption across engineering teams.
• Strong hands-on experience with Microsoft Azure.
• Hands-on with security controls in CI/CD (SAST, SCA, DAST, secret scanning, IaC scanning, container scanning).
• Practical Kubernetes/container security experience (AKS).
• Experience with Infrastructure as Code (Terraform).
• Experience with identity, secrets, and certificate management.
• Understanding SBOM, artifact signing, provenance and secure promotion of artifacts.
• Ability to combine architecture with hands-on implementation and troubleshooting.
• Experience mentoring engineers and working across infra, security, and architecture teams.
• English level Upper-Intermediate+.

Responsibilities

• Translate the DevSecOps master plan into a practical implementation roadmap.
• Define reusable CI/CD, security and release-management standards.
• Support transition to Azure Repos and Azure Pipelines.
• Implement security scanning and release gates in CI/CD pipelines.
• Configure security controls for AKS, container images, identities and secrets.
• Establish artifact signing, SBOM generation and secure promotion processes.
• Integrate platform security events with SIEM solutions.
• Define vulnerability-management, audit-evidence and incident-response processes.
• Provide technical leadership and knowledge transfer to delivery teams.
• Participate in configuration, integration and troubleshooting activities.

Skills

DevSecOps

Azure

Kubernetes

Terraform

CI/CD

Security architecture

Leadership

Mentoring

English (Upper-Intermediate+)

Tools

Azure DevOps

AKS

Terraform

SonarQube

Sonatype/Nexus

Gitleaks/Checkov/OWASP ZAP

Azure Key Vault

Azure Container Registry

Defender for Containers

Microsoft Sentinel

Gatekeeper/OPA

Job description

Andersen is seeking a DevSecOps Architect / Technical Lead to drive a large-scale digital banking modernization. You will define secure CI/CD standards, shape an Azure-centric platform security plan and mentor delivery teams across engineering, security and architecture.

The role offers both remote and office options within a hybrid setup. Key focus areas include SBOM, artifact signing, gate-based release controls, and cross-team security strategy implementation with hands-on execution and