DevSecOps Engineer – Compliance Automation

Job summary

The role of DevSecOps Engineer focuses on automating compliance processes for NATO's Cyber and Digital Transformation Division. Key responsibilities include configuring Entra ID/Azure AD integration, setting up compliance data ingestion with Azure Policy and AWS Security Hub, and validating automated workflows for control failures. The position requires expertise in Kubernetes, API integration, and scripting languages such as Python, along with a strong understanding of NATO operations and cloud strategies.

Qualifications

• Bachelor's degree at a nationally recognized/certified University in a related discipline and 3 years post-related experience
• 3 years' experience in Kubernetes, API Integration (REST), Python/Scripting, CI/CD pipelines, drafting technical data flows, Webhooks, Jira/ServiceNow APIs, M365 Graph API, Security Center, Red-teaming compliance, PowerShell, Cloud APIs, JSON, OAuth2, OIDC, Identity Management
• Documented experience in process analysis and design techniques

Responsibilities

• Review target Kubernetes/PaaS environment and prepare deployment, DB, API gateway, networking, and configuration
• Configure and test Entra ID/Azure AD or IAM integration, including role mappings, automated user onboarding, and access controls
• Set up and validate integrations with Azure Policy, AWS Security Hub, M365, and Purview to ingest compliance, telemetry, and SaaS inventory data
• Verify that imported compliance data, telemetry, control statuses, and evidence are correctly received, normalized, and mapped within RegScale
• Run controlled test changes to confirm that event-driven updates are detected and reflected accurately in RegScale
• Configure and test automated workflows so that failed controls generate Jira or Azure DevOps tickets
• Conduct Stakeholder Review Sessions to validate assumptions and mappings
• Provide issue tracking and remediation support

Skills

Degrees

Travel

Security clearance

Relocation