DevOps & Container Security Engineer

Project overview

For a project in the public sector, we are looking for an experienced DevOps & Container Security Engineer to support the setup and maintenance of a secure, automated infrastructure for Open-Source-OCI-Container-Images.

Responsibilities

You will be responsible for the technical coordination of container hardening and maintenance of OCI images, as well as the setup and further development of CI/CD pipelines for automated image creation. Your tasks include the implementation of container security and supply chain processes (SBOM, VEX, CVE handling), the integration and operation of container images in Kubernetes environments, and the implementation of Python-based automation and analysis scripts. You will perform automated vulnerability analyses, implement security best practices, and fix critical CVEs within defined deadlines.

Furthermore, documentation, validation through automated tests, and stakeholder communication are part of your responsibilities.

Requirements

At least 5 years of experience in DevOps or platform engineering, very good knowledge of container technologies (OCI, Docker, Kubernetes) and CI/CD systems (GitLab CI, Jenkins). Good Python skills for automation and scripting are required. Experience with software supply chain security (SBOM, VEX, SLSA, CVE management), Linux systems, container hardening, and vulnerability scanning are necessary.

Framework:

Project details

June 2026, Duration: 3 months with an option to extend, 95% remote, 5% on-site in Germany, full-time utilization.

• Start: Anfang/Mitte Juni 2026
• Duration: 3 Monate (30.09.2026) + Verlängerungsoption bis 31.03.2027
• Remote: hybrid
• Location: Bochum, Deutschland, DE
• Languages: German