Software & DevOps Engineer

Cavendish Professionals; Warszawa; On-site; PLN 240,000 - 360,000; Full time

Job summary

Cavendish Professionals is seeking a Software & DevOps Engineer to design, build, and secure enterprise-grade cloud platforms. You will take direct ownership of enhancing software supply chain security and embedding SDL practices across distributed systems and modern CI/CD pipelines.

Role requires proficiency in Go and Java, experience with CI/CD automation, and strong collaboration in international teams. Fluency in English is essential for daily communications.

Qualifications

• 5+ years of enterprise software engineering experience.
• Proficient in Go and Java across microservices.
• Experience with CI/CD automation and security testing.
• Fluent English for international collaboration.

Responsibilities

• Design, build, and secure enterprise-grade cloud platforms.
• Lead code reviews and evaluate/open-source components.
• Implement SBOM adoption and artifact integrity controls.
• Design and optimize automated CI/CD pipelines with security scanning.
• Embed Infrastructure-as-Code (IaC) practices and automated testing.
• Drive SDL practices and threat modeling.

Skills

Go

Java

CI/CD

DevSecOps

SDL

Threat modeling

Security reviews

English

Job description

Software & DevOps Engineer | Go & Java | Software Supply Chain Security & DevSecOps

Our client, an in-house technology consultancy of a global consulting firm, is looking for an experienced Software & DevOps Engineer to design, build, and secure enterprise-level cloud platforms. In this role, you will take direct technical ownership of enhancing software supply chain security and embedding secure development lifecycle (SDL) practices across distributed systems and modern CI/CD automation pipelines.

What You’ll Be Doing:

• Designing, building, and maintaining enterprise-grade, cloud-native backend applications and services using Go (Golang) and Java.


• Leading code reviews, establishing technical strategy, and evaluating/integrating open-source components into production systems.


• Taking ownership of software supply chain security by implementing SBOM adoption, dependency governance, and artifact integrity controls.


• Designing and optimizing automated CI/CD pipelines with integrated security scanning (SAST, dependency analysis, container scanning).


• Embedding Infrastructure-as-Code (IaC) best practices and continuous automated testing into daily deployment workflows.


• Driving Secure Development Lifecycle (SDL) practices, conducting threat modeling, and collaborating on security design reviews.

What We’re Looking For:

• 5+ years of commercial software engineering experience delivering scalable enterprise applications.


• Proven dual proficiency in Go (Golang) and Java across microservices, REST APIs, and distributed systems.


• Hands-on expertise in DevSecOps practices and end-to-end CI/CD automation (GitHub Actions, GitLab CI/CD, Jenkins).


• Consultant mindset: ability to lead security enhancements, collaborate effectively with cybersecurity squads, and guide engineering teams through architectural changes.


• Strong ownership, analytical problem-solving skills, and a commitment to secure coding standards.

Must-Haves:

• Strong core programming skills in Go (Golang) and Java.


• In-depth architectural understanding of distributed systems, cloud-native environments, and design patterns.


• Extensive commercial experience with CI/CD automation and pipeline security testing.


• Practical knowledge of Secure Development Lifecycle (SDL), threat modeling, and supply chain security (SBOM, artifact signing).


• Fluent English communication skills for daily international collaboration.