Devoteam Cyber Trust | DevSecOps - Platform Engineer - Atlassian - Senior/Lead (Remote)

Company Description

Devoteam Cyber Trust is the Cybersecurity specialist arm of the Devoteam Group. With our 800+ experts located across EMEA, we aim to establish cybersecurity as an enabler of business success rather than a gatekeeper. We leverage an end-to-end approach to Cyber Resilience, Applied Security, and Managed Security services to secure the tech journey of large and medium-sized companies from all sectors and industries.

Since 2009, previously known as INTEGRITY, our team based in Portugal is specialised in providing cutting-edge Managed Security Services that combine its expertise and proprietary technology to consistently and effectively reduce the cyber risk of our clients. The comprehensive service range includes Persistent Intrusion Testing, ISO 27001, PCI-DSS, GRC Consulting and Solutions, and Third-Party Risk Management. ISO 27001 (Information Security) and ISO 9001 (Quality) certified, PCI-QSA, and member of CREST and CIS - Centre for Internet Security, we provide services to a considerable number of clients, operating in more than 20 countries.

Job Description

Time zones: EMEA (08:00 - 17:00 CET), AMER (16:00 - 01:00 CET) or APAC (00:00 - 09:00 CET)

• Design and implement infrastructure solutions, ensuring alignment with application requirements and cybersecurity best practices, with a focus on on-premises infrastructures, including the infrastructure required to support the Atlassian suite.
• Design, implement, and maintain containerised solutions on OpenShift, Docker and Kubernetes, including the use of Kubernetes Operators, with a focus on on-premises infrastructures, for hosting and scaling Atlassian applications.
• Design, develop, and maintain infrastructure as code (IaC), with a focus on on-premises infrastructures, primarily using Terraform / Terragrunt and Ansible, to manage infrastructure with a strong focus on OpenShift and Kubernetes environments, and the deployment of Atlassian tools.
• Develop, implement, and maintain CI/CD pipelines specifically tailored for on-premises OpenShift and Kubernetes deployments, automating build, test, and deployment processes, with a focus on Jenkins and integrating with artefact repositories such as Artifactory, JFrog Xray, and Nexus, and including pipelines for Atlassian application deployments and configurations.
• Collaborate with infrastructure and development teams to integrate cybersecurity practices (SecOps) throughout the infrastructure and software development lifecycle, ensuring documentation and cybersecurity within the OpenShift and Kubernetes context, and specifically for the Atlassian suite, including user access management and security configurations.
• Develop and optimise DevSecOps practices and tools on the environments, contributing to continuous improvement by leveraging testing automation frameworks, code analysis tools such as SonarQube, and other cybersecurity scanning tools, and including the configuration and management of security controls within Jira, Confluence, and Bitbucket.
• Implement and manage comprehensive logging, monitoring, and alerting solutions, such as Prometheus, Grafana, Loki, and Alertmanager to ensure system operation, performance, and proactive incident detection within the OpenShift and Kubernetes ecosystem, and specifically for the Atlassian application performance and health.
• Respond quickly and effectively to incidents related to infrastructure, applications, and deployments, with a specific focus on OpenShift and Kubernetes on-premises environments, and including incidents related to the Atlassian suite.
• Document processes, including installation protocols, technical specifications (BSDS), and GxP relevant documentation, to ensure knowledge management and compliance, with specific documentation for the Atlassian environment, including configurations, integrations, and security settings.
• Keep up to date with the latest technologies and trends in DevSecOps, with a strong emphasis on on-premises OpenShift and Kubernetes, and including advancements and best practices for managing and securing Atlassian solutions.

Qualifications

• Degree in Computer Engineering, Information Technology or a related field.
• Proven experience (+5 years) as a DevSecOps Engineer or similar role, with significant experience in on-premises environments, and a strong focus on managing and deploying Atlassian solutions.
• Strong understanding of DevOps, SecOps and GitOps principles and practices, with a focus in on-premises infrastructures, and their application to the Atlassian suite.
• Extensive experience with on-premises infrastructure management, including Linux systems and provisioning through IaC, with specific experience in provisioning infrastructure for Atlassian applications.
• Deep experience with containerisation technologies, specifically OpenShift,