Geforderte Skills
- Cisco Certified Internetwork Expert Security (CCIE Security)
- Sichere Codierung
- Security Content Automation Protocol
- Vault
- Certified Secure Software Lifecycle Professional
- Infrastructure as Code (IaC)
- Gitlab-Ci
- Deployment Automation
- Jenkins
Sprachen: German
Jobbeschreibung
Project overview
Security Consultant – CI/CD
- German Fluency is a MUST
Project details
100% Remote | Duration: 26 Oct 2026 – 31 Dec 2027 | On-site: 0% | Contract | German Speakers only
We are looking for a hands-on Security Consultant to design and independently implement secure, self-hosted CI/CD chains for isolated network zones. The role focuses on supply-chain security, controlled artefact handover and Policy as Code.
Key Responsibilities
Key Requirements
If you are a CI/CD security specialist who enjoys building secure systems from the ground up, please apply with your CV.
- Build and implement secure self-hosted CI/CD pipelines for segregated zones.
- Set up mirrored package and image sources and controlled artefact handover across zone and network boundaries.
- Implement signature and provenance verification without online services, along with secrets management and rotation.
- Drive supply-chain security: dependency analysis; SBOM (CycloneDX/SPDX); automated SAST, dependency, image and IaC scanning; and findings triage.
- Apply Policy as Code across build and deployment pipelines.
- Multi-year hands-on experience with CI/CD chains in self-hosted installations.
- Experience with mirrored package and image sources and controlled artefact handover (validation, quarantine, release, data diodes, gateways).
- Strong knowledge of signature and provenance verification using own trust anchors and signing.
- Secrets management experience, including rotation and credential migration.
- Supply-chain security experience: SBOMs, dependency analysis, automated scanning and findings triage.
- Policy as Code experience and hands-on knowledge of tools such as GitLab CI, Jenkins, Tekton, Harbor, Nexus, Artifactory, Zot, Pulp, Vault, OpenBao, SOPS, Syft, Trivy, Cosign, Notation, Semgrep, SonarQube, Grype, Checkov, KICS, OPA/Gatekeeper, Kyverno, Conftest, Argo CD and Flux.
- Start: ab sofort
- Duration: 12 Monate
- Remote: remote
- Location: munich, Deutschland, DE
- Languages: German
Indexiert von der 9am-Meta-Suche. Du bist Job-Anbieter? Listing beanspruchen oder verwalten
Gefunden auf FreelancerMap DE