DevOps Security Engineer

Hexa Consulting; Porto; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Health insurance

Cybersecurity and AI governance upskll

Continuous training and certifications

Team collaboration and leadership

Job summary

Hexa Consulting is seeking a DevSecOps Platform Engineer to advance automation, security integration and platform engineering in a banking sector context. The role is based in Porto or Lisbon with a hybrid working model.

You will contribute to scalable, secure engineering capabilities, improving operational resilience, development efficiency and governance across technology teams. Strong experience in secure automation and IaC is essential.

Qualifications

• Bachelor's degree in Computer Science, Engineering or related field or equivalent experience.
• 5+ years in DevSecOps/DevOps/infrastructure engineering or similar.
• 3+ years in technical innovation, prototyping or architectural improvements.
• Proven ability to design secure automation in complex enterprise settings.
• Experience integrating security/compliance into development and operations.

Responsibilities

• Lead secure CI/CD pipeline design and automated infrastructure provisioning.
• Incorporate security validation, vulnerability scanning, and compliance controls across the SDLC.
• Develop and maintain self-service platforms for secure infra provisioning and deployment.
• Apply IaC and GitOps to improve consistency, traceability, and security.
• Design secure containerized environments with orchestration tech and automated recovery.
• Establish automated security gates, secrets management and policy-as-code.
• Evaluate emerging DevSecOps tech via research, experiments, and PoCs.
• Explore AI-driven automation for infra management, security analysis and incident response.
• Define governance for AI agents, including authorization, audit trails and human oversight.

Skills

DevSecOps

Automation

Security governance

AI governance

Education

Bachelor's degree

Tools

Docker

Kubernetes

OpenShift

Linux/Unix

AWS

Azure

GCP

GitOps

Argo CD

Flux

Istio

Linkerd

Prometheus

Grafana

ELK

Datadog

Python

Go

Java

Bash

LangChain

AutoGen

Job description

We are looking for a DevSecOps Platform Engineer to contribute to automation, security integration and platform engineering initiatives within the banking sector, based in Porto or Lisbon, with a hybrid working model.

This role combines secure software delivery, infrastructure automation, platform engineering and AI-driven innovation. You will help establish scalable, secure and reusable engineering capabilities that improve operational resilience, development efficiency and security governance across technology teams.

WHAT YOU WILL DO

• Lead the design and implementation of secure CI/CD pipelines, automated infrastructure provisioning and standardized deployment processes.
• Integrate security validation, vulnerability scanning, dependency analysis and compliance controls throughout the software delivery lifecycle.
• Develop and maintain self-service engineering platforms that enable secure infrastructure provisioning, application deployment and operational management.
• Implement Infrastructure-as-Code and GitOps practices to improve configuration consistency, deployment traceability and security.
• Design secure containerized environments using orchestration technologies and automated infrastructure recovery mechanisms.
• Establish automated security gates, secrets management practices and policy-as-code controls to reduce manual validation activities.
• Evaluate emerging DevSecOps technologies through technical research, experimentation and proof-of-concept initiatives.
• Explore AI-driven automation for infrastructure management, security analysis, deployment operations and incident remediation.
• Define governance frameworks for AI agents, including authorization controls, privilege boundaries, audit trails, operational containment and human oversight.

WHAT WE ARE LOOKING FOR

• Bachelor's degree in Computer Science, Engineering or a related field, or equivalent professional experience.
• At least 5 years of professional experience in DevSecOps, DevOps, infrastructure engineering, Site Reliability Engineering or related technical disciplines.
• At least 3 years of experience contributing to technical innovation, technology prototyping or architectural improvement initiatives.
• Strong experience designing and implementing secure automation solutions in complex enterprise environments.
• Proven ability to integrate security and compliance controls into development and operational processes.
• Experience improving engineering efficiency through automation, standardization and reusable technical solutions.
• Understanding of application security, infrastructure protection and secure software development practices.
• Ability to evaluate emerging technologies and translate technical findings into practical engineering recommendations.

TECHNICAL SKILLS

• CI/CD automation, Infrastructure-as-Code and GitOps.
• Docker, Kubernetes, OpenShift and Linux/Unix.
• Cloud platforms: AWS, Azure or GCP.
• DevSecOps, SAST/DAST, vulnerability scanning and secrets management.
• Security frameworks, policy-as-code and compliance automation.
• Monitoring and observability: Prometheus, Grafana, ELK or Datadog.
• Scripting with Python, Go, Java or Bash.
• AI agents, LLMs, AI governance and intelligent automation.
• DORA metrics and delivery optimization.

NICE TO HAVE

• Experience in banking or regulated industries.
• Argo CD, Flux, Istio or Linkerd.
• AI agent frameworks such as LangChain or AutoGen.
• AI-driven security and incident response.

WHAT WE OFFER

• Health insurance and confidential psychological support from day one.
• Continuous training, certification and cybersecurity and AI governance upskilling.
• Work-life balance initiatives and family support benefits.
• A collaborative environment with team activities and accessible leadership.

EQUAL OPPORTUNITY

Hexa promotes equal opportunities, diversity and inclusion, in alignment with the Portuguese Diversity Charter. We value different backgrounds, experiences and perspectives.

HEXA LIFE

At Hexa, we are all Builders. Guided by honesty, mutual support and agility, we share knowledge, embrace challenges and grow together. Every contribution matters.