Consultant OPS DevSecOps Production

Project overview

Context

The mission is part of IT Group Production (ITGP), within the Open Cloud Platforms (OCP) teams, responsible for a unified and industrialized Group DevSecOps platform (Cloud, CI/CD, AppSec, Deployment).

This platform is critical for the Group, used at scale and operated in 24/7 production mode with associated on-call duties. The OPS DevSecOps team ensures the RUN, reliability, security, and evolution of these services.

Missions

The OPS DevSecOps consultant will be involved in:

Scope of intervention:

Operations & Production (RUN):

Integration & Production Deployments:

Automation & Industrialization:

Security & Compliance:

Technical Environment

Expected Deliverables

Success Indicators (examples)

Company Pitch

OPS DevSecOps mission in production aimed at making a critical Group DevSecOps platform reliable, secure, and industrialized, within a Cloud/Kubernetes environment, with a strong focus on RUN, automation, and secure deployment.

• Guaranteeing the stability, availability, and performance of DevSecOps services in production
• Ensuring controlled RUN (incidents, changes, MCO
• Maintenance in Operational Condition)
• Securing and industrializing the integration of evolutions and new products
• Strengthening automation and operational best practices
• Contributing to the continuous improvement of the platform and user experience
• Management of incidents, problems, and changes within the DevSecOps scope
• supervision & monitoring
• management of obsolescence and upgrades
• recurring operations
• Participation in the on-call system
• Contribution to the definition and validation of technical architectures
• Support for production deployments (security, performance, operability)
• Harmonization of technical practices and standards
• Identification of manual tasks / RUN irritants
• Implementation of automations (operations, deployment, checks)
• Standardization of operational procedures and patterns
• Anticipation of security and compliance challenges
• Securing environments: system hardening, certificates, proxy, firewall flows
• Contribution to Group security controls and requirements
• Systems & Platforms: Linux, Docker, Kubernetes, distributed architectures
• DevSecOps & CI/CD: GitLab, GitLab CI, Jenkins
• Deployment & Automation: Ansible Automation Platform, ArgoCD
• Artifact Management & AppSec: Artifactory, SonarQube, Fortify / Nexus IQ
• Databases: PostgreSQL
• Production: monitoring, supervision, runbooks, automation
• Up-to-date runbooks & operational documentation
• Integration and production deployment files
• Delivered and documented automations
• Improvements to monitoring and observability
• MCO / obsolescence plan for the covered scope
• Capitalization of OPS DevSecOps best practices
• Reduction of recurring incidents and resolution time
• Quality and reliability of production deployments
• Decrease in manual operations through automation
• Level of security and operability compliance of services
• Quality and usage of produced documentation

Project details

• Start: flexible
• Remote: hybrid
• Location: Paris, France, FR
• Languages: French