Expert DevSecOps

Project overview

The 'Development Factory' domain, part of the 'Architecture & Operational Excellence' department of the Corporate IT, encompasses DevSecOps expertise, as well as support and tooling related to the software factory.

In this context, we are looking for a DevSecOps Engineer to join our team and support the developers of the Corporate IT (Paris and Porto) in adopting good development practices and in the effective use of the DevSecOps tools made available to them, notably: Bitbucket, Jenkins, Azure DevOps, Sonar, Checkmarx, Artifactory, Digital.ai Deploy, Digital.ai Release, as well as GitLab, with a view to a progressive migration to this platform in the medium term.

Main Responsibilities

Technologies Used

Required Skills

Profile Sought

Work Environment

• Support for development teams
• Support developers in implementing good development practices and effectively using DevSecOps tools.
• Organize source code in Bitbucket and, eventually, in GitLab, by implementing adapted workflows (Gitflow or others).
• Manage application and dependency versioning.
• Support teams in preparing the migration to GitLab.
• Implementation of quality and security practices
• Guide teams in implementing unit tests and static analysis to ensure code quality and security.
• Define quality and security gates to validate deliverables, while providing support to the teams.
• Contribute to the integration of quality and security controls in GitLab CI/CD pipelines as part of the target transition.
• Configuration of CI/CD pipelines
• Support the configuration and optimization of deployment pipelines in Jenkins, Azure DevOps, and eventually GitLab CI/CD.
• Assist in building packages and writing deployment scripts with Digital.ai Deploy, ensuring the role remains focused on support rather than execution on behalf of developers.
• Participate in defining pipeline-as-code best practices for standardization and progressive migration to GitLab.
• Maintenance of the shared library
• Provide and maintain a reusable Jenkins Shared Library to standardize pipelines, facilitate developers' work, and ensure consistency and quality of deployments.
• Contribute to the evolution of industrialization standards to prepare the transition to equivalent models in GitLab CI/CD.
• Training and awareness
• Train development teams on best practices for security and quality.
• Raise developers' awareness of security issues throughout the development cycle, guiding them without substituting their responsibilities.
• Support the upskilling of teams on GitLab, its collaboration model, its CI/CD pipelines, and its DevSecOps features.
• Contribution to the migration to GitLab
• Participate in the preparation and support of the medium-term migration to GitLab.
• Identify the organizational, technical, and methodological impacts related to this transition.
• Contribute to defining standards, project models, CI/CD templates, and associated best practices for the target platform.
• Support teams in the progressive adoption of GitLab as a unified platform for code management, CI/CD, and DevSecOps practices.
• Operating Systems: Windows, Linux
• Programming Languages: Java, .Net, Angular, React, Node.js, Python
• Source Code Management and CI/CD Tools: Bitbucket, Jenkins, Azure DevOps, GitLab
• Quality and Security Tools: Sonar, Checkmarx
• Artifact Management Tools: Artifactory
• Deployment and Release Management Tools: Digital.ai Deploy, Digital.ai Release
• Database Tools: Oracle, MySQL
• Visualization Tools: PowerBI
• Scripting Tools: Shell
• Environments: OpenShift, GCP
• Solid experience in DevSecOps, with good command of the mentioned tools.
• Ability to support and train developers, with a consulting-oriented approach.
• Good understanding of the challenges related to DevOps tool transformation and change management within the context of a platform migration.
• Excellent communication skills to interact effectively with development teams.
• Good level of English, both written and spoken, essential for effective collaboration with teams based in Porto.
• Good understanding of security issues in software development.
• Significant experience with GitLab.
• Degree in Computer Science.
• Previous experience as a DevSecOps Engineer or in a similar role.
• Strong appetite for continuous improvement, process optimization, and change management support.
• Professional proficiency in English, enabling the facilitation of discussions, workshops, and support with international teams.
• Experience in a context of migration to GitLab or implementation of GitLab CI/CD would be highly appreciated.

Project details

• Start: ASAP
• Duration: 3 mois renouvelable
• Location: Paris, Île-de-France, FR
• Rate: 50-69 EUR/h
• Languages: French