Required skills
- DevSecOps
- GitHub Enterprise
- GitHub Actions
- SonarQube
- JFrog Artifactory
- JFrog Xray
- AI Security
- GitHub Copilot
- Claude Code
- CI/CD
- SAST
- SCA
Languages: French
Job description
Seeking a Senior AI DevSecOps Engineer to develop and secure a strategic platform for artificial intelligence, focusing on DevSecOps practices, application security, generative AI, automation, and AWS Cloud.
Project overview
Context
As part of the development of a strategic platform dedicated to artificial intelligence and the industrialization of DevSecOps practices, we are looking for a Senior AI DevSecOps Engineer (M/F).
You will join a team specialized in building and operating a platform that allows development teams to design, secure, publish, and host their artificial intelligence components, including AI agents, MCP (Model Context Protocol) servers, and development assistants.
This mission is part of an innovative technological environment, combining DevSecOps, application security, generative AI, automation, and AWS Cloud.
Missions
You will directly contribute to the security and industrialization of large-scale artificial intelligence uses.
Tools & Environment
Working Conditions
Work Environment
You will work within an agile team of 6 people, consisting of a Product Owner, two AI Platform engineers, two AI DevSecOps engineers, and one engineer dedicated to supporting the teams.
You will be involved in an international environment, interacting with DevSecOps, Cloud, Cybersecurity, and Artificial Intelligence teams.
This mission offers the opportunity to contribute to the construction of an enterprise artificial intelligence platform, with major security, governance, and industrialization challenges.
- Administration and security of DevSecOps tools
- Administer and maintain GitHub Enterprise Cloud and GitHub Enterprise Server environments.
- Ensure the administration and evolution of SonarQube and JFrog Artifactory / Xray platforms.
- Guarantee the availability, security, and performance of development tools.
- Automate administration and maintenance operations.
- Security of AI development assistants
- Define and implement security policies for GitHub Copilot and Claude Code assistants.
- Configure usage rules, instructions, administered settings, and hooks.
- Supervise the use of AI assistants in development environments.
- Contribute to defining best practices for AI-assisted development.
- Industrialization of CI/CD pipelines
- Design, deploy, and maintain GitHub Actions pipelines.
- Integrate automated security controls: SAST, SCA, secret detection, and quality gates.
- Implement traceability, signing, and provenance mechanisms for software components.
- Industrialize validation and publication processes for AI components.
- Security of AI agents and MCP infrastructures
- Participate in securing MCP servers and federated registries.
- Implement security controls related to non-human identities and access management.
- Establish safeguards to protect sensitive data, secrets, and outbound flows.
- Contribute to software supply chain management and SBOMs applied to AI components.
- Participate in the security evaluation of LLMs and AI agents.
- Construction and evolution of the AI platform
- Participate in the development and industrialization of an AI platform based notably on AWS.
- Contribute to the integration of Amazon Bedrock AgentCore, registry services, and internal portal and hub components.
- Collaborate with Cloud, DevSecOps, Cybersecurity, and AI teams.
- Participate in continuous improvement and automation of technical processes.
- Technologies and tools:
- CI/CD
- Claude Code
- DevSecOps
- GitHub
- Generative AI
- IAM
- Linux
- Python
- Sonarqube
- Technological environment:
- DevSecOps: GitHub Enterprise Cloud / Server, GitHub Actions, SonarQube, JFrog Artifactory, JFrog Xray
- Artificial Intelligence: GitHub Copilot, Claude Code, LLM, AI agents, MCP, Amazon Bedrock AgentCore
- Cybersecurity: SAST, SCA, secret detection, SBOM, IAM, SSO, SAML, SCIM
- Cloud and automation: AWS, Linux, Python, CI/CD
- Methodologies: Agile, DevSecOps, continuous improvement, security by design
- Mission location: Paris
- Start date: ASAP
- Duration: long-term mission, renewable
- Remote work: 2 days per week
- English level: professional mandatory
- Required seniority: 8 to 10 years minimum experience
Project details
- Start: flexible
- Remote: hybrid
- Location: Paris, France, FR
- Languages: French
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on collective.work