Devsecops, Automation & Innovation Engineer | It Cib

Natixis In Portugal; Viseu; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid Work Policy

Green Transportation Budget

Job summary

Natixis in Portugal seeks an Automation & Innovation Engineer to drive automation transformation across the CIB DevOps ecosystem. You will shape CI/CD pipelines, IaC, and platform tooling, enabling self-service and secure code delivery.

You will lead innovation labs, prototype emerging automation technologies, and implement platform-as-a-service abstractions to empower Development squads and business IT teams.

Qualifications

• 5+ years in DevOps, Infrastructure Engineering, SRE or related roles
• 3+ years driving innovation, prototyping technologies, or leading architectural improvements
• Experience with financial services or regulated environments preferred
• StrongCI/CD expertise and infrastructure as code practice with tool-agnostic approach
• Proficiency in Python/Go/Java/Bash for automation and tooling
• Solid understanding of security automation and compliance in DevOps

Responsibilities

• Design and implement CI/CD pipelines and IaC strategies across platforms
• Automate infrastructure provisioning and configuration management
• Lead innovation labs to prototype automation technologies and AI-enabled tooling
• Develop and maintain a self-service platform for developers
• Drive observability, security gates, and compliance checks into pipelines
• Collaborate across Development, Security, and Operations teams
• Establish automation standards and share best practices across IT

Skills

DevOps

CI/CD

Automation

Python/Go/Java

Observability

Git

Containerization

Kubernetes/OpenShift

Education

Bachelor's degree in Computer Science or related

Tools

Docker

Kubernetes

OpenShift

Terraform/IaC tools

Jenkins/GitLab CI/GitHub Actions

SAST/DAST tools

Job description

Full-time Company Description Natixis in Portugal is a Centre of Expertise whose mission is to transform traditional banking by developing innovative solutions for the business, operations and work culture of Groupe BPCE worldwide. As part of Groupe BPCE's international division, Natixis in Portugal designs and delivers solutions for its two core areas – Corporate & Investment Banking and Asset & Wealth Management – as well as transversal services that support all entities across the Group.

With more than 3,000 employees representing 46 nationalities, the teams work across Information Technology, Banking Support Activities, and Compliance, in an integrated, inclusive, and cross-functional way, supporting all business lines and platforms of the Group. A disruptive mindset and a culture of proximity and agility identify Natixis in Portugal Team and reflect the company's mission to transform traditional banking at a global scale: a perfect match in the Portuguese dynamics and entrepreneurial ecosystem.

Job Description

We are seeking an Automation & Innovation Engineer to join the IT Transversal (IT TRV) Innovation & Development team — a forward-looking role driving automation transformation and continuous innovation of CIB's development and deployment ecosystem.

Key Responsibility Areas: Primary: Eliminate manual development and operational toil Design and implement comprehensiveCI/CD pipeline automation across CIB Automate infrastructure provisioning throughInfrastructure-as-Code principles and tooling EstablishGit Ops principles for configuration management and deployment Automate security validation, compliance checks, and dependency scanning Drive adoption ofcontainerization (Docker) and orchestration (Kubernetes/Open Shift) Createself-healing infrastructure that requires minimal human intervention Eliminate manual security reviews through automated security gates 2. Innovation Leadership & Technology Prototyping Primary: Drive continuous innovation in automation practices Leadinnovation lab activities — prototype and validate emerging automation technologies (service mesh, policy-as-code, advanced observability, Git Ops tools) Conducttechnology watch on Dev Ops, security automation, and AI4 Dev Ops trends Createproof-of-concept implementations for cutting-edge tools/frameworks De-risk adoption of emerging technologies before enterprise-wide rollout Transfer innovations and c ompetencies toDevelopment Squad and Business IT teams (IT TRV, IT GMT, IT GBCR) Establishautomation excellence center standards and best practices Present findings and recommendations to CIB CIO community

Primary: Build automation platform enabling team independence Design and maintain internal platform (CI/CD, Ia C, observability, security scanning) CreatePlatform-as-a-Service (Paa S) abstractions hiding infrastructure complexity Enable developers todeploy code securely without manual security reviews Establish platform as reusable asset available to IT Transversal, GMT, and GBCR teams Document and evangelize platform usage through training and community building 4. Developer Experience & Productivity Innovation Primary: Reduce friction and enable developer happiness Measure"developer toil" — manual, repetitive work slowing down delivery Enablefast feedback loops — deployment feedback in seconds, not hours Designfrictionless onboarding — new team members productive in days Build tools that feel like"magic" — developers don't need to understand infrastructure Conduct regular feedback sessions with development teams to identify pain points 5. Velocity Metrics & Continuous Improvement Primary: Drive measurable improvements in team performance DORA Metrics Targets: Metric Target Deployment frequency Daily or multiple-times-daily Lead time for changes Reduce from weeks to days/hours Time-to-recovery (MTTR) Reduce by 50%+

Automation Coverage Targets: Area Target Infrastructure-as-Code coverage 100% Security validation automation 90%+ Testing automation 95%+ Design and deployAI agents for infrastructure provisioning, deployment automation, and incident remediation Define permission systems and privilege boundaries for AI agents Establish audit trails and decision logging for agent actions ImplementAI-driven threat modeling and proactive security: Leverage LLMs for threat modeling and adversary behavior anticipation Move from reactive compliance to proactive security hardening Buildobservability and tracing for AI agents (causal graph tracing, confidence metrics) Designdata governance policies for AI agents (prevent data exfiltration, implement redaction) Develop"agent-ready" infrastructure code (idempotent, predictable, safe for AI consumption) Establishhybrid human-AI workflows with clear escalation paths Qualifications Experience & Education Bachelor's degree in Computer Science, Engineering, or equivalent experience 5+ years in Dev Ops, Infrastructure Engineering, SRE, or related roles 3+ years driving innovation, prototyping technologies, or leading architectural improvements Proven track record of reducing manual toil and improving team velocity Familiarity with financial services or regulated industries preferred Infrastructure Automation & Dev Ops Expert-levelInfrastructure-as-Code principles and practices (tool-agnostic) StrongCI/CD expertise : Jenkins, Git Lab CI, Git Hub Actions Deepcontainerization (Docker) and orchestration (Kubernetes, Open Shift) Git mastery (Git Flow, branching strategies) Cloud platform experience (AWS, Azure, GCP) Security & Compliance Automation Application security principles (OWASP Top 10) Security scanning automation: SAST/DAST (Sonar Qube, Checkmarx, ZAP) Container security scanning (Trivy, Aqua) Secrets management (Hashi Corp Vault, AWS Secrets Manager) Compliance frameworks (PCI-DSS, GDPR, SOX) Security policy-as-code (OPA, Kyverno) Understanding of AI agents and LLM applications in operations Familiarity with prompt engineering and LLM-based tooling Conceptual knowledge of agent governance, permission systems, and sandboxing Exposure to AI agent frameworks (Lang Chain, Auto Gen) Understanding of hybrid human-AI workflow design Centralized logging (ELK, Splunk, Cloud Watch) APM and distributed tracing (Jaeger, Data Dog, New Relic) Software Engineering & Architecture Proficiency in Python, Go, Java, or Bash Software design principles and testing strategies Soft Skills Innovation mindset — prototyping, experimentation, "failing fast" Entrepreneurial drive — ownership, bias toward action Communication— technical and non-technical stakeholders Collaboration— across Development, Security, and Operations Teaching mindset— mentoring teams on automation best practices Continuous learning— staying current with emerging technologies Preferred Skills Open-source contribution or community involvement Service mesh experience (Istio, Linkerd) Incident response and postmortem facilitation Success Metrics & KPIs DORA Metrics Deployment frequency: weekly → daily or multiple-times-daily Lead time for changes: weeks → days/hours

MTTR: reduce by 50%+ Change failure rate: reduce failed deployments and rollbacks Automation Coverage Infrastructure-as-Code:100% defined in code Security scanning:90%+ automated

Testing:95%+ executed automatically

Deployments:90%+ via automated pipelines Platform Adoption Developer adoption:80%+ of CIB developers using self-service platform Developer toil reduction:20%+ in manual tasks Developer satisfaction:80%+ satisfaction score Technologies prototyped:2-3 per year Prototype-to-production rate:60%+ within 18 months Regular innovation updates to CIB CIO community AI4 Dev Ops Maturity AI agent governance framework: established and documented Agent success rate:95%+ reliability Proactive threat detection via LLM-based modeling

Additional Information Our workplace reflects the vibrant spirit of our locations, with initiatives such as a Green Transportation Budget, electric bikes and a flexible Hybrid Work Policy.

We promote wellbeing through the Honolulu Wellness Club, a Prayer Room, a Lactation Room, and themed Villages that inspire creativity and collaboration. Through our ESG and DEI strategies, we are committed to being inclusive, caring, and fair, ensuring every voice is heard and valued.

Devsecops, Automation & Innovation Engineer | It Cib • Portalegre, Portuguese Republic, PT