DevSecOps Engineer

Hexa Group; Lisboa; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Hexa Group in Lisbon is seeking a Senior DevSecOps Engineer to join a technology environment in a hybrid role. You will focus on secure automation capabilities, advancing software delivery processes and building scalable self-service platforms.

You will contribute to infrastructure optimization, continuous innovation and responsible AI-driven operations in a highly regulated setting. Collaboration across engineering, security and operations is essential.

Qualifications

• Bachelor's degree in Computer Science, Engineering or equivalent.
• Proven ability to design and implement secure, scalable automation solutions in complex IT environments.
• Strong understanding of software delivery processes, infrastructure management and security integration.
• Experience evaluating technologies and translating prototypes into reliable operational solutions.
• Analytical, solution-oriented approach with focus on measurable improvements.
• Excellent communication and collaboration with multidisciplinary stakeholders.
• Autonomy, accountability and continuous learning mindset.

Responsibilities

• Design, implement and optimize CI/CD pipelines to improve software delivery reliability, security and efficiency.
• Automate infrastructure provisioning, configuration management and deployment processes using IaC and GitOps.
• Integrate automated security controls, vulnerability assessments and compliance validation into development workflows.
• Build reusable platform engineering capabilities that enable secure, autonomous application deployment.
• Implement container orchestration, automated recovery mechanisms and infrastructure observability to improve operational resilience.
• Evaluate emerging DevSecOps technologies through technical research, experimentation and PoC development.
• Develop AI-assisted automation capabilities for infrastructure operations, deployment management and incident remediation.
• Define governance controls for AI agents, including authorization boundaries, auditability, monitoring and human oversight.
• Improve developer experience through self-service capabilities, simplified onboarding and the reduction of repetitive operational activities.
• Monitor delivery performance through DORA metrics, automation coverage and continuous improvement initiatives.
• Collaborate with engineering, security and operations teams to standardize practices, transfer knowledge and support technology adoption.

Skills

DevSecOps experience

Automation initiatives

Strong communication

Autonomy and accountability

Mentorship mindset

Education

Bachelor's degree in Computer Science or Engineering

Tools

Jenkins

GitLab CI

GitHub Actions

Docker

Kubernetes

OpenShift

Linux OS (RHEL/CentOS/Ubuntu)

Job description

We are looking for a Senior DevSecOps Engineer to join a technology environment within the banking sector, based in Lisbon with a hybrid working model.

This opportunity focuses on developing secure automation capabilities, improving software delivery processes and building scalable self-service platforms. You will contribute to infrastructure optimization, continuous innovation and the responsible adoption of AI-driven operations in a highly regulated environment.

WHAT YOU WILL DO

• Design, implement and optimize CI/CD pipelines to improve software delivery reliability, security and efficiency.
• Automate infrastructure provisioning, configuration management and deployment processes using Infrastructure-as-Code and GitOps practices.
• Integrate automated security controls, vulnerability assessments and compliance validation into development workflows.
• Build and maintain reusable platform engineering capabilities that enable secure, autonomous application deployment.
• Implement container orchestration, automated recovery mechanisms and infrastructure observability to improve operational resilience.
• Evaluate emerging DevSecOps technologies through technical research, experimentation and proof-of-concept development.
• Develop AI-assisted automation capabilities for infrastructure operations, deployment management and incident remediation.
• Define governance controls for AI agents, including authorization boundaries, auditability, monitoring and human oversight.
• Improve developer experience through self-service capabilities, simplified onboarding and the reduction of repetitive operational activities.
• Monitor delivery performance through DORA metrics, automation coverage and continuous improvement initiatives.
• Collaborate with engineering, security and operations teams to standardize practices, transfer knowledge and support technology adoption.

WHAT WE ARE LOOKING FOR

• 6 to 9 years of professional experience in DevOps, DevSecOps, Site Reliability Engineering or infrastructure engineering.
• At least 3 years of experience contributing to technology innovation, architectural improvements or automation initiatives.
• Bachelor's degree in Computer Science, Engineering or equivalent professional experience.
• Proven ability to design and implement secure, scalable automation solutions in complex IT environments.
• Strong understanding of software delivery processes, infrastructure management and security integration.
• Experience evaluating technologies and translating technical prototypes into reliable operational solutions.
• Analytical and solution-oriented approach, with a focus on measurable improvements and operational efficiency.
• Ability to communicate technical concepts effectively and collaborate with multidisciplinary stakeholders.
• Autonomy, accountability and a continuous learning mindset.
• Willingness to mentor colleagues, share technical knowledge and promote engineering best practices.

TECHNICAL SKILLS

• Infrastructure-as-Code principles, infrastructure automation and configuration management.
• CI/CD platforms: Jenkins, GitLab CI and GitHub Actions.
• Containerization and orchestration: Docker, Kubernetes and OpenShift.
• Git version control, branching strategies and GitFlow.
• Linux/Unix administration, including RHEL, CentOS and Ubuntu.
• Cloud platforms: AWS, Microsoft Azure and Google Cloud Platform.
• Application security principles, OWASP Top 10 and secure software development practices.
• Automated security testing: SAST, DAST, SonarQube, Checkmarx and OWASP ZAP.
• Container vulnerability scanning with Trivy and Aqua.
• Secrets management using HashiCorp Vault and AWS Secrets Manager.
• Security policy-as-code with Open Policy Agent (OPA) and Kyverno.
• Compliance and data protection frameworks, including PCI DSS, GDPR and SOX.
• Monitoring and observability solutions: Prometheus, Grafana, ELK Stack, Datadog and Splunk.
• Application performance monitoring and distributed tracing with Jaeger, New Relic or equivalent solutions.
• Programming and scripting with Python, Go, Java or Bash.
• REST APIs, microservices architecture and event-driven systems.
• Software engineering principles, automated testing and infrastructure reliability practices.
• AI-assisted operations, LLM applications and intelligent automation concepts.
• AI agent governance, access control, execution isolation, audit logging and human-in-the-loop workflows.
• AI observability, threat modeling and data protection principles.

NICE TO HAVE

• Previous experience in banking, financial services or other regulated industries.
• GitOps implementation experience with Argo CD or Flux.
• Service mesh technologies such as Istio or Linkerd.
• Familiarity with AI agent development frameworks, including LangChain and AutoGen.
• Experience with prompt engineering and LLM-based operational tooling.
• Knowledge of AI agent tracing, confidence assessment and automa