Jobs / Bundesdruckerei-Gruppe

DevSecOps Engineer im Bereich Digitale Identitäten (m/w/d)

Bundesdruckerei-Gruppe · Berlin, BE, Deutschland
Berlin, BE, DeutschlandOnsite
Remuneration
Not specified
Location
Berlin, BE, Deutschland
Visa sponsorship
Not specified

Job summary

The Bundesdruckerei-Gruppe is looking for a DevSecOps Engineer for digital identities in Berlin. This role involves contributing to SRE standard tasks, hardening backend systems, investigating security incidents, and integrating security practices into CI/CD pipelines. The position is temporary for 18 months.

Qualifications

  • Successfully completed studies in computer science or a comparable field, or an IT-technical education with relevant professional experience in a comparable position.
  • Good experience in SRE or DevSecOps-related roles (containerization, Helm, Docker, Kubernetes/OpenShift, CI/CD pipelines).
  • Knowledge of Infrastructure-as-Code (IaC) and practical experience with Terraform, as well as basic knowledge of Bash scripting.
  • Experience with DevSecOps practices, including OWASP security standards, and experience with tools for vulnerability analysis of containers and dependencies (e.g., Trivy, Grype/Syft).
  • Experience with hardening and secure setup and operation of backend systems for mobile frontends.
  • Experience in understanding, evaluating, and resolving security risks; desirable: knowledge of established security standards such as BSI IT Grundschutz, ISO27001, NIS2 directive, OWASP Testing Guide, or OWASP ASVS.
  • Very good German and/or English language skills (at least C1) and willingness to be on call (24/7).

Responsibilities

  • Contribute to SRE standard tasks including automation, monitoring, implementation and operation of security monitoring, alarming, and incident response processes.
  • Harden backend systems for mobile frontends across all stages.
  • Investigate security incidents and conduct root cause analyses.
  • Design processes related to operations and security incidents.
  • Integrate security practices into CI/CD pipelines.
  • Collaborate with Backend Engineers, advise on architectural decisions, and support operational challenges.
  • Work closely with the Product Security Team as a Security Champion.

Skills

BashDockerHelmKubernetesOpenShiftTerraformTrivy

Work schedule

Rufbereitschaft (24/7)

Contract length

Befristet für 18 Monate

Relocation

No