DevSecOps Engineer

Ework Group, founded in 2000 and listed on Nasdaq Stockholm, is a total talent solutions provider with around 13,000 independent professionals on assignment. They partner with clients in both private and public sectors, focusing on IT/OT, R&D, Engineering, and Business Development to deliver sustainable value through holistic and independent talent management. They bridge clients and professionals throughout the talent supply chain, benefiting individuals, organizations, and society.

• Experience with Azure Cloud platform including knowledge of Azure CEP; certification is a plus
• Experience and knowledge in vulnerability management and security automation (SAST, SCA, DAST, container vulnerability)
• Hands-on experience with code repository and CI/CD tools including GitHub Actions, Azure DevOps Pipelines, GitLab
• Experience with OS security involving Active Directory, Windows networking, Group policies, DNS, PKI, and Certificates
• Familiarity with Linux, database, and application server administration in production environments
• Experience with scripting languages such as Powershell and Bash
• Understanding of Docker Container platforms like OpenShift, AKS, or ECS
• Ops background with knowledge of network configuration and code quality/security tools is a plus
• Excellent communication skills and ability to collaborate with stakeholders
• Self-motivated with a test and learn mindset and adaptability to virtual collaboration

• Identify requirements and implement the Software Development Life Cycle (SDLC) for digital initiatives
• Craft CI/CD strategies and pipelines using GitHub Actions, Azure DevOps Pipelines, and GitLab
• Ensure the highest standards of code quality and security through automation and security tools
• Collaborate with Solution Architects, Data Engineers, and Software Engineers to develop highly scalable and high-performance software
• Engage with stakeholders to define requirements and deliverables
• Manage vulnerability and security automation including SAST, SCA, DAST, and container vulnerability scanning
• Monitor and measure operational effectiveness
• Manage code repositories and security of operating systems including Active Directory, Linux, Windows networking, Group policies, DNS, PKI, and Certificates