Security Consultant CI/CD

Project overview

For our client, we are looking for an experienced Security Consultant CI/CD (m/f/d) on a freelance basis, who will build secure CI/CD pipelines for isolated network zones and implement them independently as part of a pilot project.

The Framework Conditions

Responsibilities

Build and implement secure CI/CD pipelines in a self-operated environment

Set up mirrored package and image sources for containers, operating system, and language packages

Design controlled artifact handovers across zones and network boundaries – including verification, quarantine, and release

Implement signature and origin verification without online services using own trust anchors and own signing

Integrate Secrets Management, including rotation and replacement of stored credentials

Secure the software supply chain through dependency analysis, SBOMs, and automated security checks

Implement Policy as Code and evaluate and prioritize audit findings based on defined thresholds

Requirements

Several years of practical experience with CI/CD pipelines in self-operated installations

Experience in setting up and operating mirrored package and image sources

Knowledge in secure artifact handover, e.g., via data diodes and handover gateways

Experience with signature and origin verification as well as Secrets Management

In-depth knowledge of Software Supply Chain Security and SBOM standards such as CycloneDX or SPDX

Experience with SAST, dependency, image, and IaC scanning, as well as evaluating and prioritizing findings

Practical experience with Policy as Code and working with the following technologies and tools

The Technical Environment

CI/CD: GitLab CI, Jenkins, Tekton

Registry & Artifact Management: Harbor, Nexus, Artifactory, Zot, Pulp

Secrets Management: Vault, OpenBao, External Secrets Operator, SOPS

SBOM, Signing & Provenance: Syft, Trivy, Dependency-Track, Cosign, Notation, in-toto

Security Scans: Semgrep, SonarQube, Grype, Checkov, KICS

Policy Enforcement: OPA/Gatekeeper, Kyverno, Conftest

GitOps: Argo CD, Flux

Interested?

Then we look forward to receiving your current profile and information on your availability and hourly rate.

Project details

10/26/2026 to 12/31/2027

100% Remote

Contract Type: Freelance

• Start: 2026-11
• Duration: 14 Monate
• Remote: remote
• Location: Deutschland, Deutschland, DE
• Languages: German