Lead Security Consultant – CI/CD & Software Supply Chain | 100% Remote

Project overview

Industry: IT

For a platform in the IT environment, we are looking for a Lead Security Consultant for secure CI/CD chains and software supply chain security in self-operated, partially isolated infrastructure. 100% remote, start from 12.10.2026.

Responsibilities

Profile – Required (please document with projects in your CV)

Advantageous

Application

Please complete the following qualification form so we can review your profile for this project:

https://pea-global.com/bewerben?vac=VA_000134

• Evaluate and specifically strengthen existing build processes
• Build and operate mirrored package and image sources
• Design controlled artifact transfer across zone boundaries (checking, quarantine, release)
• Implement signature and origin verification without online services
• Take responsibility for Secrets Management including rotation
• Introduce SBOM (CycloneDX/SPDX), SAST, Dependency/Image/IaC scanning, and Policy as Code
• Several years of hands-on experience with CI/CD chains in self-operated installations (GitLab CI, Jenkins, Tekton)
• Registry/Artifacts: Harbor, Nexus, or Artifactory
• Secrets: HashiCorp Vault, OpenBao, SOPS
• SBOM/Signing: Syft, Trivy, Dependency-Track, Cosign
• Policy Enforcement: OPA/Gatekeeper, Kyverno; GitOps with Argo CD/Flux
• German citizenship, residence in Germany
• Self-operated public cloud supply chain processes
• GitOps across multiple zones, container runtime and cluster security
• Regulated environments with network zone models

Project details

Germany / 100% Remote

from 12.10.2026

Experience Level: Expert / Lead

Security Clearance: required – German citizenship is a prerequisite

up to €690/day

• Start: flexible
• Duration: 12 Monate
• Remote: remote
• Location: Berlin, Deutschland, DE
• Rate: 86-86 EUR/h
• Languages: German