Nature of the Tasks

- Develop, configure, and monitor DevSecOps pipelines using pipelines-as-code with integrated quality gates (linting, testing, security scanning, environment promotion), ensuring efficient and reliable CI/CD processes.
- Automate deployments with progressive delivery strategies (e.g., canary, blue/green) and feature flagging, incorporating automated rollback mechanisms to ensure reliable and repeatable releases.
- Manage deployment and setup of services and applications, ensuring they are configured correctly and optimized for the production environment.
- Manage infrastructure provisioning, scaling, and availability using Infrastructure-as-Code (IaC) practices, with drift detection, policy-as-code enforcement, and tested disaster recovery runbooks (RTO/RPO).
- Implement monitoring and observability solutions (metrics, logs, traces) aligned with service level objectives (SLOs), ensuring application and infrastructure performance and health are tracked effectively.
- Coordinate incident management through on-call rotations, incident playbooks/runbooks, and blameless post-incident reviews, ensuring production issues are resolved swiftly with lessons learned embedded.
- Perform performance tuning of both applications and infrastructure to ensure optimal usage of resources and user experience.
- Integrate security practices into CI/CD pipelines, including software supply-chain security (SBOMs, provenance checks), secrets management, and least-privilege access, to maintain secure system configurations.
- Design and maintain internal developer platforms with golden paths, reusable templates, and policy-based guardrails, enabling teams to securely and consistently self-serve infrastructure and application environments.
- Plan and implement upgrades and migrations of software stack.
- Monitor,



analyse, and optimise cloud costs by applying FinOps practices such as budgeting, forecasting, rightsizing, and implementing showback/chargeback models to maximise cost efficiency.
- Document pipelines, processes, and infrastructure for reusability and knowledge transfer.
- Implement GitOps for declarative cluster and application configuration management.
- Establish artifact repositories and image signing; enforce software supply-chain policies and integrity checks.

Specific Expertise and Technologies

- Proven experience with Docker, Kubernetes, Terraform, Ansible, HashiCorp Vault, Linux.
- Proven experience with DevSecOps lifecycle tools (GitLab, Atlassian, GitHub).
- Proven experience with static code analysis (SonarQube, Fortify, Snyk, etc.).
- Proven experience with black box and white box testing (OWASP, HP Fortify, etc.).
- Proven experience with repository management tools (Nexus etc.).
- Proven experience with monitoring tools (Dynatrace, Splunk, Prometheus etc.).
- Proven experience with internal developer platforms (Backstage, Humanitec etc.).
- Proven experience with development languages (Python, YAML, Bash, PowerShell, Ruby, or Perl).
- Proven experience with cloud platforms (AWS, Azure, OVH etc.).
- Proven experience with Infrastructure-as-Code (Terraform, CloudFormation, CDK, Bicep, ARM).
- Proven experience with System Design and Architecture.
- Experience with large,



enterprise-level multi-user Information Systems.
- Good knowledge in establishing and managing deployment pipelines and release management.
- Good knowledge in conducting DevSecOps in an Agile work environment.
- Good knowledge in cloud security architecture and security requirements.
- Good knowledge of continuous delivery and Application Lifecycle Management tools (JIRA, Git, Bamboo, Nexus, etc.).
- Good knowledge of secret management tools (CyberArk, HashiCorp etc.).
- Good knowledge of network fundamentals (DNS, Load Balancing, Firewalls, VPNs, basic network troubleshooting, etc.).
- CI options such as GitHub Actions, GitLab CI, Jenkins; and GitOps controllers like Argo CD and Flux.
- Supply-chain tooling (e.g., SBOM generation/signing, SLSA) and policy agents (e.g., OPA, Kyverno).

Minimum Level of Expertise

- Normal

Certification and/or Standards

Mandatory: One of the following certifications (or equivalent):

- AWS Certified DevOps Engineer – Professional
- Microsoft Azure DevOps Engineer Expert
- Docker Certified Associate
- Certified Kubernetes Administrator (CKA)
- Certified Kubernetes Application Developer (CKAD)
- HashiCorp Terraform Associate
- DevSecOps Engineering (DSOE)

Skills

- Rapid self-starting capability and experience in team working.
- Excellent interpersonal and communication skills.
- Ability to participate in multi-lingual meetings, ease of communication.
- Ability in applying security and cloud best practices.
- Automation skills to optimize and understand DevSecOps pipelines.
- Ability to understand, speak, and write English; French is considered an additional asset.
- Ability to work in a team as well as autonomously.
- Results-oriented mindset, focused on delivering.

📌 Devsecops engineer (España)
🏢 Tata Consultancy Services
📍 España