Senior DevSecOps Engineer: Secure CI/CD at Scale

Nimber; Sintra; On-site; EUR 90,000 - 120,000; Full time

Job summary

Nimber seeks a Senior DevSecOps Engineer to join our Development, Cloud & Security group in Portugal. You’ll lead secure design, scalable CI/CD pipelines and cloud security architecture, collaborating with engineering, platform and risk teams.

You’ll implement IaC, threat modelling, and automated security controls across the release lifecycle, while mentoring engineers and shaping enterprise security practices in a regulated environment.

Qualifications

• 10+ years in software/DevSecOps or related fields.
• 5+ years with Kubernetes/OpenShift and cloud-native apps.
• Expert-level knowledge of Kubernetes, OpenShift and ARO.
• Experience with multi-cloud security architecture and landing zones.
• Hands-on with GitHub Enterprise, GitHub Actions, Azure DevOps and Jenkins.
• Strong SSDLC, OWASP Top 10, API security and threat modelling.

Responsibilities

• Evolve Secure SDLC with threat modelling and secure coding.
• Design secure CI/CD architectures and self-service capabilities.
• Define patterns for Kubernetes, OpenShift, and Azure Red Hat OpenShift.
• Build reusable IaC modules and policy-as-code.
• Integrate security testing and SBOMs across pipelines.
• Enhance observability, reliability and operational readiness.
• Mentor engineers and align cross-functional teams.

Skills

10+ years in Software Engineering/DevS

DevSecOps leadership

Kubernetes & OpenShift

Cloud security architecture

Azure, AWS & Google Cloud

GitHub/GitHub Actions/Azure DevOps/Jen

SSDLC & OWASP Top 10

Infrastructure as Code (Terraform/Open

Python/PowerShell/Bash

Go/Java/C#/JS/TS

Regulated environments experience

Tools

Azure DevOps

GitHub Enterprise

Jenkins

Job description

Nimber seeks a Senior DevSecOps Engineer to join our Development, Cloud & Security group in Portugal. You’ll lead secure design, scalable CI/CD pipelines and cloud security architecture, collaborating with engineering, platform and risk teams.

You’ll implement IaC, threat modelling, and automated security controls across the release lifecycle, while mentoring engineers and shaping enterprise security practices in a regulated environment.