Required skills
- CI/CD
- Supply Chain Security
- Secrets Management
- Policy as Code
- GitLab CI
- Jenkins
- Harbor
- Vault
- Syft
- Trivy
- Cosign
- Semgrep
Nice to have:SASTDependency ScanningImage ScanningIaC ScanningGitOpsOPAKyverno
Languages: German · English
Job description
The role involves building and implementing secure CI/CD pipelines for isolated network zones, focusing on supply chain security and automated security checks.
Project overview
Your activities
The profile sought
Language requirements
- Building and implementing secure CI/CD pipelines in-house for isolated network zones
- Building and operating mirrored package and image sources
- Implementing controlled artifact handovers between zones
- Implementing supply chain security, signature checks, and policy as code
- Integrating automated security checks and secrets management
- Several years of practical experience with in-house CI/CD
- Experience with mirrored package and image sources as well as controlled artifact handover
- Knowledge of signing, provenance, SBOM, and software supply chain security
- Experience with SAST, dependency, image, and IaC scanning
- Knowledge of policy as code, secrets management, and GitOps
- Practical experience with tools such as GitLab CI, Jenkins, Harbor, Vault, Syft, Trivy, Cosign, Semgrep, OPA, or Kyverno
- German: Fluent
- English: Advanced knowledge
Project details
- Start: Ab sofort
- Duration: Ab sofort - 31.12.2027
- Remote: remote
- Location: Remote, DE
- Languages: German, English
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on SOMI