Required skills
Nice to have:SASTDependency ScanningImage ScanningIaC ScanningPolicy as CodeSecrets ManagementGitOpsSBOM
Languages: German
Job description
The role involves building and implementing secure CI/CD pipelines for isolated network zones, focusing on supply chain security and automated security checks.
Project overview
Activities:
- Building and implementing secure CI/CD pipelines in-house for isolated network zones
- Building and operating mirrored package and image sources
- Implementing controlled artifact handovers between zones
- Implementing supply chain security, signature checks, and policy as code
Requirements
- Several years of practical experience with in-house CI/CD
- Experience with mirrored package and image sources as well as controlled artifact handover
- Knowledge of signing, provenance, SBOM, and software supply chain security
- Experience with SAST, dependency, image, and IaC scanning
- Knowledge of policy as code, secrets management, and GitOps
- Practical experience with tools such as GitLab CI, Jenkins, Harbor, Vault, Syft, Trivy, Cosign, Semgrep, OPA, or Kyverno
Project details
- Start: ab sofort
- Duration: 9 Monate
- Remote: remote
- Location: Düsseldorf, Deutschland, DE
- Languages: German
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on FreelancerMap DE