Required skills
- CI/CD
- Software Supply Chain Security
- GitLab CI
- Jenkins
- Tekton
- Harbor
- Nexus
- Artifactory
- HashiCorp Vault
- OpenBao
- SOPS
- SBOM
- SAST
- Policy as Code
- GitOps
- Argo CD
- Flux
Languages: German
Job description
Seeking a Lead Security Consultant with expert-level experience in secure CI/CD pipelines and software supply chain security for a 100% remote role. The consultant will be responsible for evaluating and improving existing build processes, implementing secure artifact handling, and introducing various security scanning and policy enforcement tools.
Project overview
Industry: IT Services & Consulting
For a platform in the IT environment, we are looking for a Lead Security Consultant for secure CI/CD chains and software supply chain security in self-operated, partly isolated infrastructure. 100% remote, start from 10/12/2026.
Responsibilities
Profile
Required:
Experience:
Advantageous:
Security Requirement
A security clearance is necessary for the project. It will be newly conducted for the project – willingness is sufficient, an existing clearance is not required.
Skills: GitLab CI/CD, SBOM & Supply-Chain-Security, HashiCorp Vault, Policy as Code, Harbor / Artifactory, Jenkins, Tekton, Trivy, Cosign, Kyverno, Argo CD, SonarQube
- Evaluate and specifically improve existing build processes
- Set up and operate mirrored package and image sources
- Design controlled artifact transfer across zone boundaries (checking, quarantine, release)
- Implement signature and origin verification without online services
- Take responsibility for Secrets Management including rotation
- Introduce SBOM (CycloneDX/SPDX), SAST, Dependency/Image/IaC scanning, and Policy as Code
- Several years of hands-on experience with CI/CD chains in self-operated installations (GitLab CI, Jenkins, Tekton)
- Registry/Artifacts: Harbor, Nexus, Artifactory
- Secrets: HashiCorp Vault, OpenBao, SOPS
- SBOM/Signing: Syft, Trivy, Dependency-Track, Cosign
- Policy Enforcement: OPA/Gatekeeper, Kyverno; GitOps with Argo CD/Flux
- Expert level
- German citizenship (security clearance required), residence in Germany
- Professional experience at Principal/Lead level
- Jenkins
- Tekton
- Trivy
- Cosign
- Kyverno
- Argo CD
- SonarQube
Project details
Germany / 100% Remote
Immediately
Experience Level: Principal
Security Clearance: Willingness required
up to €690/day
€690
100%
- Start: 2026-10
- Remote: remote
- Location: Remote, Deutschland, DE
- Languages: German
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on FreelancerMap DE