Lead Security Consultant – CI/CD Security / DevSecOps

Responsibilities

Qualification:

CI/CD: GitLab CI, Jenkins, Tekton

Artifact Management: Harbor, Nexus, Artifactory, Zot, Pulp

Secrets Management: HashiCorp Vault, OpenBao, External Secrets Operator, SOPS

Software Supply Chain Security: Syft, Trivy, Dependency-Track, Cosign, Notation, in-toto

Security Testing: Semgrep, SonarQube, Grype, Checkov, KICS

Policy as Code: OPA/Gatekeeper, Kyverno, Conftest

GitOps & Deployment: Argo CD, Flux

Framework Data:

• Analysis and evaluation of existing CI/CD pipelines, build processes, and software deployment methods
• Design and implementation of secure CI/CD architectures within highly secure IT infrastructures
• Securing build and deployment environments, including the separation of development, build, and delivery rights
• Design and construction of a secure artifact pipeline for controlled transfer of software and dependencies between different network zones
• Setup and operation of mirrored repositories and container registries for isolated network environments
• Implementation of verification, quarantine, and release processes for software artifacts and external dependencies
• Design and implementation of Secrets Management, including secure management and rotation of credentials
• Securing the software supply chain through Software Bill of Materials (SBOM), digital signatures, and provenance information
• Integration of automated security checks for vulnerability analysis of source code, dependencies, container images, and Infrastructure as Code
• Introduction and implementation of Policy-as-Code concepts for automated enforcement of security policies
• Design of secure software deployment processes for isolated network zones without permanent internet connectivity
• Collaboration with development and operations teams to optimize secure and efficient software deployment processes
• Independent implementation and validation of developed security concepts within a pilot environment
• Development of a rollout concept for introducing security solutions into further development teams and network zones
• 6–10 years of relevant project experience in CI/CD, DevSecOps, IT Security, or Software Supply Chain Security
• Demonstrable experience in the independent design, securing, and practical implementation of CI/CD architectures
• Profound knowledge in setting up and operating self-managed CI/CD infrastructures, not exclusively cloud-based managed services
• Experience in securing build, deployment, and software delivery processes
• Practical experience with isolated network environments, offline infrastructures, and controlled artifact transfers across network boundaries
• Knowledge in setting up and operating mirrored software repositories, container registries, and artifact management
• Experience with secure artifact transfers, including quarantine, verification, and release processes, and ideally data diodes or transfer gateways
• Profound knowledge in Secrets Management and in the secure management and rotation of credentials
• Experience with Software Supply Chain Security, SBOM standards (CycloneDX, SPDX), digital signatures, and provenance information
• Practical experience in integrating automated security checks (SAST, SCA, Container Security, IaC Security)
• Knowledge in Policy as Code, GitOps, and automated enforcement of security policies
• Practical knowledge in several of the following technologies or comparable solutions:
• Experience in collaborating with development teams and introducing secure development and deployment processes
• Ideally, experience with regulated or security-critical IT infrastructures
• Very good German language skills, spoken and written
• Residence in Germany

Project details

Short notice, upon customer confirmation and commissioning

Utilization: Full-time (5 days/week)

Initially until 31.12.2026, extension expected until 31.12.2027

Approx. 95% remote, occasional on-site assignments by arrangement

• Start: ab sofort
• Duration: 3 Monate
• Remote: remote
• Location: Meckenheim, Deutschland, DE
• Languages: German