Zum Inhalt springen

Diese Ausschreibung ist auf Englisch.

freelancermapOffen

CI/CD Security Consultant - 100% Remote Work - German Speakers Only

iBSC ltd · munich, Deutschland · Remote · Senior

  • munich, Deutschland · Remote
  • 12 Monate
  • German

Indexiert (vor 4 Tagen) · laufend aktualisiert

Start
ab sofort
Laufzeit
12 Monate
Arbeitsmodell
Remote
Vertrag
Freelance / B2B
Erfahrungslevel
Senior
Referenz
3064732

Geforderte Skills

Sprachen: German

Jobbeschreibung

Project overview

Security Consultant – CI/CD

  • German Fluency is a MUST

Project details

100% Remote | Duration: 26 Oct 2026 – 31 Dec 2027 | On-site: 0% | Contract | German Speakers only

We are looking for a hands-on Security Consultant to design and independently implement secure, self-hosted CI/CD chains for isolated network zones. The role focuses on supply-chain security, controlled artefact handover and Policy as Code.

Key Responsibilities

Key Requirements

If you are a CI/CD security specialist who enjoys building secure systems from the ground up, please apply with your CV.

  • Build and implement secure self-hosted CI/CD pipelines for segregated zones.
  • Set up mirrored package and image sources and controlled artefact handover across zone and network boundaries.
  • Implement signature and provenance verification without online services, along with secrets management and rotation.
  • Drive supply-chain security: dependency analysis; SBOM (CycloneDX/SPDX); automated SAST, dependency, image and IaC scanning; and findings triage.
  • Apply Policy as Code across build and deployment pipelines.
  • Multi-year hands-on experience with CI/CD chains in self-hosted installations.
  • Experience with mirrored package and image sources and controlled artefact handover (validation, quarantine, release, data diodes, gateways).
  • Strong knowledge of signature and provenance verification using own trust anchors and signing.
  • Secrets management experience, including rotation and credential migration.
  • Supply-chain security experience: SBOMs, dependency analysis, automated scanning and findings triage.
  • Policy as Code experience and hands-on knowledge of tools such as GitLab CI, Jenkins, Tekton, Harbor, Nexus, Artifactory, Zot, Pulp, Vault, OpenBao, SOPS, Syft, Trivy, Cosign, Notation, Semgrep, SonarQube, Grype, Checkov, KICS, OPA/Gatekeeper, Kyverno, Conftest, Argo CD and Flux.
  • Start: ab sofort
  • Duration: 12 Monate
  • Remote: remote
  • Location: munich, Deutschland, DE
  • Languages: German

Indexiert von der 9am-Meta-Suche. Du bist Job-Anbieter? Listing beanspruchen oder verwalten

Gefunden auf FreelancerMap DE

Alle Jobs durchsuchen
Kostenlos anmelden und bewerben