Expert DevSecOps AI – GitHub Enterprise / AWS / MCP (M/F)

Project overview

As part of a strategic program for technological transformation and industrialization of artificial intelligence, CYNERS is looking for an Expert AI DevSecOps Engineer (M/F) to support a large international group in building, securing, and operating its enterprise AI platform.

You will join a squad specialized in developing a platform that allows group teams to design, validate, publish, and host their artificial intelligence components: AI agents, MCP (Model Context Protocol) servers, Skills, Plugins, and Hooks.

This mission combines DevSecOps engineering, application security, automation, AWS Cloud, and the security of agentic AI architectures.

Your main responsibilities

You will be involved in innovative projects, with a major operational role in securing and industrializing artificial intelligence uses across an international group.

Profile sought

With a higher education in computer science, software engineering, or cybersecurity, you have senior to expert experience in DevSecOps, with in-depth expertise in GitHub Enterprise and AWS Cloud environments.

You have solid experience in development platform administration, CI/CD automation, and securing software delivery chains.

You have also developed practical experience with AI code assistants and a good understanding of the security challenges related to agentic architectures.

Essential technical skills

Complementary skills sought

Expected qualities

Fluent English is essential, both written and spoken.

Work environment

You will join an agile squad of 6 people consisting of a Product Owner, two AI Platform Engineers, two AI DevSecOps Engineers, and one engineer dedicated to supporting and adopting solutions.

You will work in interaction with the group's DevSecOps, Cybersecurity, Cloud, and Artificial Intelligence teams, as well as with the teams responsible for the governance of AI agents and non-human identities.

Technological environment

• Administration of DevSecOps platforms
• Administer and maintain GitHub Enterprise Cloud and GitHub Enterprise Server.
• Ensure the availability, performance, and security of development environments.
• Manage the administration and evolution of SonarQube Server and JFrog Artifactory / Xray.
• Industrialize operations for exploitation and maintenance.
• Contribute to the continuous improvement of DevSecOps infrastructures.
• Securing AI development assistants
• Define and implement security policies for GitHub Copilot and Claude Code assistants.
• Configure policies, managed settings, instructions, and hooks.
• Guide the use of AI assistants in development environments.
• Collaborate with cybersecurity teams to deploy appropriate controls without hindering developer activities.
• Industrialization of CI/CD pipelines
• Design, deploy, and maintain GitHub Actions pipelines.
• Implement security controls and scans in publication chains.
• Integrate SAST, SCA, and secret detection solutions.
• Implement quality gates and automated validation mechanisms.
• Deploy the necessary security controls for publishing AI components.
• Security of AI agents and MCP infrastructures
• Participate in securing MCP servers and federated registries.
• Define and implement controls related to non-human identities and access management.
• Establish safeguards to protect sensitive data, PII, secrets, and outbound flows.
• Contribute to securing the software supply chain: SBOM, CycloneDX, SPDX, signature, and provenance.
• Participate in the security assessment of LLMs and AI agents.
• Building and maintaining the AI platform
• Participate in the design and evolution of an AWS-based AI platform.
• Contribute to the integration of AWS AgentCore Gateway, AgentCore Runtime services, and agent registry components.
• Participate in building internal MCP portal and hub components.
• Develop automations in Python and Ansible.
• Support the industrialization and security of AI deployments.
• GitHub Enterprise Cloud and GitHub Enterprise Server: advanced expertise in administration, operation, and security.
• DevSecOps / CI/CD: mastery of GitHub Actions pipelines, quality gates, and automation.
• GitHub Copilot and Claude Code: advanced practice, enterprise configuration, policies, managed settings, and hooks.
• AWS: solid experience with Cloud infrastructures and services.
• SonarQube and JFrog Artifactory: significant experience in administration and operation.
• Python / Linux: mastery of scripting, system administration, and automation.
• Application Security: experience with SAST, SCA, and secret detection tools.
• Security of MCP servers and multi-agent architectures.
• AWS AgentCore and AI architectures.
• Software Supply Chain Security: SBOM, CycloneDX, SPDX, signature, and provenance.
• JFrog Xray.
• Identity and Access Management: SSO, SAML, SCIM, Okta.
• Security of non-human identities.
• Assessment of LLMs and AI agents.
• Knowledge of ISO 27001, DORA, and AI Act repositories.
• Excellent autonomy in solving complex technical problems.
• Rigor, analytical skills, and risk awareness.
• Ability to reconcile security requirements and delivery imperatives.
• Teamwork skills and knowledge sharing ability.
• Excellent communication and synthesis skills.
• Proactive and innovative.
• Strong adaptability to the rapid evolution of the AI ecosystem.
• Ability to arbitrate between RUN activities and transformation projects.
• DevSecOps: GitHub Enterprise Cloud / Server, GitHub Actions, SonarQube, JFrog Artifactory, JFrog Xray.
• Generative AI: GitHub Copilot, Claude Code, LLM, AI agents, MCP.
• Cloud: AWS, AgentCore Gateway, AgentCore Runtime.
• Application Security: SAST, SCA, secret detection, SBOM, signature, and provenance.
• IAM: SSO, SAML, SCIM, Okta, non-human identities.
• Automation: Python, Linux, Ansible, CI/CD.
• Methodologies: DevSecOps, Agile, Security by Design, continuous improvement.

Project details

La Garenne-Colombes (92).

Desired start date: November 16, 2026.

long-term mission, renewable.

Arrangement: full-time, standard business hours.

You will contribute to a structuring enterprise AI platform project, with significant challenges in industrialization, security, and technological innovation.

• Start: ASAP
• Duration: 3 mois renouvelable
• Remote: hybrid
• Location: La Garenne-Colombes, Île-de-France, FR
• Languages: French