DevSecOps Platform Engineer

Hexa Group; Porto, Lisboa; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Health insurance

Training & certification

Cybersecurity & AI governance upskll

Work-life balance initiatives

Job summary

Hexa Group seeks a DevSecOps Platform Engineer to advance automation, security integration and platform engineering in a hybrid Porto or Lisbon setup.

You will design secure CI/CD pipelines, IaC and GitOps, build self-service platforms, and drive AI-enabled automation while ensuring governance and compliance across engineering teams.

Qualifications

• Bachelor's degree in CS, Eng or equivalent experience.
• 5+ years in DevSecOps/DevOps or infra engineering.
• Proven ability to integrate security and compliance into devops.
• Experience securing automation in enterprise environments.

Responsibilities

• Lead secure CI/CD design and automated infra provisioning.
• Integrate security validation and compliance controls throughout SDLC.
• Develop self-service platforms for secure provisioning and deployment.
• Implement IaC and GitOps to improve traceability and security.
• Design secure container environments using orchestration technologies.
• Establish automated security gates, secrets management and policy-as-code controls.
• Evaluate emerging DevSecOps technologies through R&D and PoCs.
• Explore AI-driven automation for infra management and incident remediation.

Skills

CI/CD automation

Infrastructure as Code

GitOps

Docker

Kubernetes

OpenShift

Cloud platforms

Security governance

SAST/DAST

Python scripting

AI governance

DORA metrics

Education

Bachelor's degree in CS/Engineering

Tools

Docker

Kubernetes

OpenShift

Linux/Unix

Argo CD

Flux

Job description

We are looking for a DevSecOps Platform Engineer to contribute to automation, security integration and platform engineering initiatives within the banking sector, based in Porto or Lisbon, with a hybrid working model.

This role combines secure software delivery, infrastructure automation, platform engineering and AI-driven innovation. You will help establish scalable, secure and reusable engineering capabilities that improve operational resilience, development efficiency and security governance across technology teams.

WHAT YOU WILL DO

• Lead the design and implementation of secure CI/CD pipelines, automated infrastructure provisioning and standardized deployment processes.
• Integrate security validation, vulnerability scanning, dependency analysis and compliance controls throughout the software delivery lifecycle.
• Develop and maintain self-service engineering platforms that enable secure infrastructure provisioning, application deployment and operational management.
• Implement Infrastructure-as-Code and GitOps practices to improve configuration consistency, deployment traceability and security.
• Design secure containerized environments using orchestration technologies and automated infrastructure recovery mechanisms.
• Establish automated security gates, secrets management practices and policy-as-code controls to reduce manual validation activities.
• Evaluate emerging DevSecOps technologies through technical research, experimentation and proof-of-concept initiatives.
• Explore AI-driven automation for infrastructure management, security analysis, deployment operations and incident remediation.
• Define governance frameworks for AI agents, including authorization controls, privilege boundaries, audit trails, operational containment and human oversight.

WHAT WE ARE LOOKING FOR

• Bachelor's degree in Computer Science, Engineering or a related field, or equivalent professional experience.
• At least 5 years of professional experience in DevSecOps, DevOps, infrastructure engineering, Site Reliability Engineering or related technical disciplines.
• At least 3 years of experience contributing to technical innovation, technology prototyping or architectural improvement initiatives.
• Strong experience designing and implementing secure automation solutions in complex enterprise environments.
• Proven ability to integrate security and compliance controls into development and operational processes.
• Experience improving engineering efficiency through automation, standardization and reusable technical solutions.
• Understanding of application security, infrastructure protection and secure software development practices.
• Ability to evaluate emerging technologies and translate technical findings into practical engineering recommendations.

TECHNICAL SKILLS

• CI/CD automation, Infrastructure-as-Code and GitOps.
• Docker, Kubernetes, OpenShift and Linux/Unix.
• Cloud platforms: AWS, Azure or GCP.
• DevSecOps, SAST/DAST, vulnerability scanning and secrets management.
• Security frameworks, policy-as-code and compliance automation.
• Monitoring and observability: Prometheus, Grafana, ELK or Datadog.
• Scripting with Python, Go, Java or Bash.
• AI agents, LLMs, AI governance and intelligent automation.
• DORA metrics and delivery optimization.

NICE TO HAVE

• Experience in banking or regulated industries.
• Argo CD, Flux, Istio or Linkerd.
• AI agent frameworks such as LangChain or AutoGen.
• AI-driven security and incident response.

WHAT WE OFFER

• Health insurance and confidential psychological support from day one.
• Continuous training, certification and cybersecurity and AI governance upskilling.
• Work-life balance initiatives and family support benefits.
• A collaborative environment with team activities and accessible leadership.

EQUAL OPPORTUNITY

Hexa promotes equal opportunities, diversity and inclusion, in alignment with the Portuguese Diversity Charter. We value different backgrounds, experiences and perspectives.

HEXA LIFE

At Hexa, we are all Builders. Guided by honesty, mutual support and agility, we share knowledge, embrace challenges and grow together. Every contribution matters.
We Build Together.