DevSecOps

Nimber; Sintra; On-site; EUR 90,000 - 120,000; Full time

Job summary

Nimber seeks a Senior DevSecOps Engineer to join our Development, Cloud & Security group in Portugal. You’ll lead secure design, scalable CI/CD pipelines and cloud security architecture, collaborating with engineering, platform and risk teams.

You’ll implement IaC, threat modelling, and automated security controls across the release lifecycle, while mentoring engineers and shaping enterprise security practices in a regulated environment.

Qualifications

• 10+ years in software/DevSecOps or related fields.
• 5+ years with Kubernetes/OpenShift and cloud-native apps.
• Expert-level knowledge of Kubernetes, OpenShift and ARO.
• Experience with multi-cloud security architecture and landing zones.
• Hands-on with GitHub Enterprise, GitHub Actions, Azure DevOps and Jenkins.
• Strong SSDLC, OWASP Top 10, API security and threat modelling.

Responsibilities

• Evolve Secure SDLC with threat modelling and secure coding.
• Design secure CI/CD architectures and self-service capabilities.
• Define patterns for Kubernetes, OpenShift, and Azure Red Hat OpenShift.
• Build reusable IaC modules and policy-as-code.
• Integrate security testing and SBOMs across pipelines.
• Enhance observability, reliability and operational readiness.
• Mentor engineers and align cross-functional teams.

Skills

10+ years in Software Engineering/DevS

DevSecOps leadership

Kubernetes & OpenShift

Cloud security architecture

Azure, AWS & Google Cloud

GitHub/GitHub Actions/Azure DevOps/Jen

SSDLC & OWASP Top 10

Infrastructure as Code (Terraform/Open

Python/PowerShell/Bash

Go/Java/C#/JS/TS

Regulated environments experience

Tools

Azure DevOps

GitHub Enterprise

Jenkins

Job description

Senior DevSecOps Engineer

Development, Cloud & Security

Your code goes into production. Your decisions shape the entire organisation.

A pipeline can do much more than turn green. It can make security part of everyday engineering, make developers' lives easier and build confidence in every release.

That's the challenge.

At Nimber, we're looking for a Senior DevSecOps Engineer with deep technical expertise, a questioning mindset and the drive to improve how software is built and delivered at scale.

You’ll work where development, cloud and security meet, with Kubernetes and OpenShift at the centre. Reporting to the Head of DevSecOps, you’ll combine technical leadership with hands‑on engineering, influencing architecture and turning decisions into working solutions.

What you'll build and improve

• Security from the first design decision. Evolve the Secure SDLC, embed threat modelling and secure coding into engineering practices, and automate controls throughout development.
• Pipelines that teams can trust. Design secure CI/CD architectures, build reusable frameworks and self-service capabilities, and establish traceability from commit to production.
• Solid foundations for cloud‑native delivery. Define patterns for Kubernetes, OpenShift and Azure Red Hat OpenShift, covering GitOps, workload isolation, identity, networking, secrets and security policies.
• Automation that scales. Build reusable Infrastructure as Code modules, implement policy‑as‑code and make good engineering practices repeatable.
• Trust across the software supply chain. Integrate security testing, prioritise vulnerabilities by risk, and protect dependencies, builds and artefacts through SBOMs, signing and provenance verification.
• Better engineering with every release. Strengthen observability, reliability and operational readiness, measuring how changes improve security and delivery.
• Knowledge that travels. Mentor engineers and technical leads, create practical standards, and connect development, platform, cybersecurity, architecture and risk teams.

The experience you'll bring

• 10+ years in Software Engineering, Platform Engineering, DevOps, DevSecOps, Cloud Engineering or Application Security.
• At least 5 years in each of these areas: designing and operating enterprise CI/CD platforms; working with Kubernetes and container platforms; and delivering cloud‑native applications.
• Advanced expertise in Kubernetes, OpenShift and ARO, including enterprise OpenShift operations, hardening, RBAC, networking, storage and secrets management.
• Expert‑level experience with Azure, AWS and Google Cloud, alongside cloud security architecture, landing zones and multicloud governance. The role also covers Oracle Cloud.
• Strong experience with GitHub Enterprise, GitHub Actions, Azure DevOps and Jenkins, embedding security, release controls and automated validation into delivery pipelines.
• Strong knowledge of SSDLC, OWASP Top 10, API security, threat modelling and security testing, including code, dependency, container, secrets and IaC scanning.
• Experience with Infrastructure as Code and automation, within an ecosystem that includes Terraform/OpenTofu, Ansible and Azure Bicep.
• Proficiency in Python, PowerShell and Bash, as well as development with Go, Java, C# and JavaScript/TypeScript.
• A proven track record of leading enterprise DevSecOps transformations and working in highly regulated environments.

We also value

Experience in banking, financial services, insurance, healthcare, telecommunications or critical infrastructure.

Certifications such as CKA, CKS, Red Hat OpenShift/RHCA, Azure Solutions Architect or DevOps Engineer, AWS Solutions Architect Professional, Google Professional Cloud Architect, CISSP, CSSLP, CCSP or GIAC.

Your impact goes beyond the stack

We want to understand how you make decisions, navigate trade-offs between security and productivity, and help others do better work.

How you turn a security requirement into something teams can adopt. How you explain an architectural decision. How you take a good idea and make it work in production.

Does this sound like your kind of challenge?