Mid Cloud DevSecOps | Hybrid

A2IT Technology; Almada; Híbrido; EUR 38 000 - 60 000; Tempo integral

Resumo da oferta

A2IT Technology in Portugal seeks a Cloud DevSecOps Engineer to join a challenging project focused on cloud security, automation, and DevSecOps best practices. You will implement least privilege policies across cloud environments and collaborate with Security, Software Engineering, and DevOps teams.

The role also involves mentoring junior teammates, ensuring QA coverage across functional and performance testing, and staying current with evolving security trends and compliance requirements.

Qualificações

• 2–4 years hands-on cloud experience (AWS/Azure/GCP).
• Strong IAM, Kubernetes Security and Cloud Networking skills.
• IaC-based security in CI/CD pipelines (Terraform or equivalent).
• Scripting in Python or PowerShell; fluent English.

Responsabilidades

• Enforce Least Privilege across AWS, Azure, and GCP environments.
• Collaborate with Security, Software Engineering and DevOps teams.
• Mentor junior DevSecOps team members.
• QA validation with development teams for functional and performance tests.
• Stay current on security trends, compliance and emerging technologies.

Conhecimentos

AWS/Azure/GCP

IAM

Kubernetes Security

Secure SDLC

DevSecOps

Terraform

CI/CD pipelines

Python

PowerShell

English (Fluent)

Docker

Kubernetes

CSPM tools

SCA/DAST/DSA

Ferramentas

Terraform

Docker

Snyk

Crossplane

Descrição da oferta de emprego

We are looking for a Cloud DevSecOps Engineer to join a challenging project focused on cloud security, automation, and DevSecOps best practices.

Responsibilities:

• Continuously analyze and refine configuration policies to enforce the Principle of Least Privilege across AWS, Azure, and GCP environments.
• Collaborate closely with Security, Software Engineering, and DevOps teams to strengthen the organization's overall security posture.
• Mentor and support junior DevSecOps team members.
• Work directly with development teams (service owners) to execute comprehensive QA validation, covering both functional and performance testing.
• Stay up to date with the latest security trends, vulnerabilities, compliance requirements, and emerging technologies, driving continuous improvement in security practices.

Requirements:

• 2–4 years of hands-on experience with cloud platforms (AWS, Azure, or GCP);
• Strong expertise in: Identity & Access Management (IAM), Kubernetes Security, Cloud Networking;
• Solid understanding of Secure Software Development Lifecycle (Secure SDLC), DevSecOps principles, and Infrastructure as Code (Terraform or equivalent);
• Experience integrating security controls into CI/CD pipelines;
• Proficiency in scripting and automation using Python, PowerShell, or similar technologies;
• Excellent communication skills, with the ability to explain technical security concepts to both technical and non-technical stakeholders;
• Strong analytical thinking, problem-solving skills, and a collaborative mindset;
• Fluent English (spoken and written).

Nice to Have:

• Experience with Cloud Security Posture Management (CSPM) tools, such as: Prisma Cloud, Wiz, BitSight, SecurityScorecard, Black Duck;
• Knowledge of Application Security tools and methodologies, including SCA, SAST, and DAST, particularly Snyk;
• Experience with Docker and managing Kubernetes clusters;
• Experience using AI tools to improve and accelerate security-related activities;
• Familiarity with Crossplane for infrastructure management.

Work Model: Hybrid (3 days onsite per week) – Flexible;