Key Skills

Job Description

DevSecOps Engineer (Contractor) Contract type: B2B Duration: Up to 5 years (initial 2 years, then 1+1+1 extensions) Location Maastricht Airport-Onsite (Remote based on manager approval) Reference: Required before onboarding About the Role Our client is looking for an experienced DevSecOps Engineer to join its engineering team and help maintain and evolve its standardised, in-house DevSecOps toolchain. The toolchain is the common development platform used by the organisation’s software teams to build, secure and deliver their products. You will support development teams in migrating to the platform, extend it to deliver software packages securely to more restricted environments, and help ensure that software products comply with new cybersecurity regulations. This is a hands-on role at the intersection of software delivery, security and compliance. Business Context Several upcoming programmes are shaping the work ahead: Ongoing projects require software packages to be delivered securely to more restricted network environments, which calls for additional components and implementation on top of the existing platform. The organisation is upgrading its IT service management system to the new BMC Helix, and the platform’s integration components must be adapted accordingly. Tooling is being migrated to Atlassian Cloud. The EU regulation on information security (Part-IS, Commission Implementing Regulation 2023/203) comes into force in 2026. Compliance in the area of vulnerability management requires Software Bills of Materials (SBOM) and static source code analysis for all relevant subsystems. Key Responsibilities Support existing products running on the DevSecOps platform and resolve issues raised by development teams. Onboard new products and teams onto the platform, guiding them through migration. Maintain and evolve the platform’s release and deployment components, including adapting them for the Helix/Remedy upgrade and the Atlassian Cloud migration. Design and implement new components for secure artefact transfer and promotion to more restricted environments. Produce SBOMs and implement static source code analysis in CI/CD pipelines to support regulatory compliance. Monitor platform components, identify risks and obstacles, and make sure product-related problems are addressed. Review priorities, make recommendations, take part in decision-making and coordinate with the relevant teams. Document solutions and share knowledge with development teams. Required Qualifications Proven experience in a DevSecOps, DevOps or platform engineering role. Strong knowledge of CI/CD pipelines and tooling (for example Jenkins, GitLab CI or similar) and of artefact repository management (for example Nexus or Artifactory). Experience with SBOM generation, software composition analysis and static application security testing (SAST). Good understanding of secure software supply chain practices and vulnerability management. Scripting and automation skills (for example Python, Bash, Groovy) and experience with infrastructure as code. Experience with Atlassian tools and ITSM systems (Jira, Confluence, BMC Remedy/Helix or similar), including integrations. Ability to work with development teams, communicate clearly and coordinate with several stakeholders. Fluent English, written and spoken. [Degree level or equivalent experience]. Eligibility to work with the client and to pass the required security vetting, with nationality criteria as per the client’s rules. Nice to Have Familiarity with cybersecurity regulation and standards (Part-IS, ISO 27001, IEC 62443 or similar). Experience delivering software to segregated, air-gapped or highly restricted environments. Experience with containers and orchestration (Docker, Kubernetes) and with messaging platforms such as Kafka. Experience in regulated or safety-critical sectors such as aviation, transport, energy or public administration. Knowledge of agile ways of working.

Core Responsibilities

Support and onboard development teams using the DevSecOps platform, resolve product issues, and maintain or extend release and deployment components. Implement secure artifact transfer, SBOM generation, and static code analysis in CI/CD pipelines while coordinating platform changes and regulatory compliance work.

Requirements

Candidates need proven DevSecOps, DevOps, or platform engineering experience, strong CI/CD and artifact management knowledge, and experience with SBOMs, software composition analysis, and SAST. They should also have scripting and infrastructure-as-code skills, familiarity with Atlassian and ITSM integrations, strong communication skills, fluent English, and eligibility to pass the required security vetting.