DevSecOps Engineer (m/f/d) Ref. No. 26- 84578

Job summary

The DevSecOps Engineer builds and operates secure, reliable cloud-native infrastructure and software delivery processes for space-sector applications supporting the French Space Agency. The role uses Terraform, Kubernetes/K3S with Rancher, GitLab CI/CD, Docker, and security and monitoring tools including SonarQube, JFrog Artifactory and Xray, Prometheus, and Grafana. It also supports data services such as PostgreSQL, Redis Streams, DuckDB, and data lakes while improving platform reliability and software supply-chain security.

Qualifications

• At least 3 years of professional experience in DevOps, DevSecOps, or related infrastructure engineering.
• Strong experience with Linux, Docker, and Kubernetes.
• Hands-on experience with K3S and/or Rancher.
• Strong knowledge of Terraform and Infrastructure as Code.
• Experience designing and maintaining GitLab CI/CD pipelines.
• Experience with software quality and security tools such as SonarQube, JFrog Artifactory, or JFrog Xray, or equivalent tools.
• Good understanding of container security, Kubernetes security, and secure deployment practices.
• Scripting and automation skills with Bash and/or Python.
• Good understanding of cloud-native architectures, container orchestration, and distributed systems.
• Fluency in spoken and written English.
• French language knowledge is an advantage.
• Troubleshooting skills and ability to work independently and collaboratively.

Responsibilities

• Design, deploy, and maintain cloud infrastructure using Terraform and Infrastructure as Code principles.
• Deploy, configure, and operate Kubernetes/K3S clusters using Rancher.
• Build, maintain, and optimize GitLab CI/CD pipelines for automated software delivery.
• Integrate code quality and security tools, including SonarQube, JFrog Artifactory, and JFrog Xray, into development and deployment workflows.
• Implement secure Docker image builds, vulnerability scanning, and deployment processes.
• Manage Kubernetes security, including role-based access control, secrets, network policies, and access controls.
• Deploy and maintain monitoring and alerting with Prometheus and Grafana.
• Support infrastructure and services involving PostgreSQL, Redis Streams, DuckDB, and data lakes.
• Automate infrastructure provisioning, configuration, and operational processes.
• Troubleshoot production issues and improve platform availability, reliability, and performance.
• Collaborate with development teams to integrate security, quality, and operational requirements throughout the software lifecycle.

Skills

Languages

Work schedule

Industry

Relocation