Jobs / Bundesdruckerei-Gruppe
DevSecOps Engineer im Bereich Digitale Identitäten (m/w/d)
Bundesdruckerei-Gruppe · Berlin, BE, Deutschland
Berlin, BE, DeutschlandOnsite
Remuneration
Not specified
Location
Berlin, BE, Deutschland
Visa sponsorship
Not specified
Job summary
The Bundesdruckerei-Gruppe is looking for a DevSecOps Engineer for digital identities in Berlin. This role involves contributing to SRE standard tasks, hardening backend systems, investigating security incidents, and integrating security practices into CI/CD pipelines. The position is temporary for 18 months.
Qualifications
- Successfully completed studies in computer science or a comparable field, or an IT-technical education with relevant professional experience in a comparable position.
- Good experience in SRE or DevSecOps-related roles (containerization, Helm, Docker, Kubernetes/OpenShift, CI/CD pipelines).
- Knowledge of Infrastructure-as-Code (IaC) and practical experience with Terraform, as well as basic knowledge of Bash scripting.
- Experience with DevSecOps practices, including OWASP security standards, and experience with tools for vulnerability analysis of containers and dependencies (e.g., Trivy, Grype/Syft).
- Experience with hardening and secure setup and operation of backend systems for mobile frontends.
- Experience in understanding, evaluating, and resolving security risks; desirable: knowledge of established security standards such as BSI IT Grundschutz, ISO27001, NIS2 directive, OWASP Testing Guide, or OWASP ASVS.
- Very good German and/or English language skills (at least C1) and willingness to be on call (24/7).
Responsibilities
- Contribute to SRE standard tasks including automation, monitoring, implementation and operation of security monitoring, alarming, and incident response processes.
- Harden backend systems for mobile frontends across all stages.
- Investigate security incidents and conduct root cause analyses.
- Design processes related to operations and security incidents.
- Integrate security practices into CI/CD pipelines.
- Collaborate with Backend Engineers, advise on architectural decisions, and support operational challenges.
- Work closely with the Product Security Team as a Security Champion.
Skills
BashDockerHelmKubernetesOpenShiftTerraformTrivy
Work schedule
Rufbereitschaft (24/7)
Contract length
Befristet für 18 Monate
Relocation
No