- 7+ years engineering; 3+ in CI/CD platform or DevSecOps
- Strong Jenkins + Groovy shared library expertise
- Advanced Python automation (JSON/YAML processing, tooling scripts)
- Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata
- Supply-chain security (SLSA, CycloneDX SBOM, digests)
- Experience with SonarQube, Sonatype IQ, container and SAST scanning
- Proven performance tuning (caching, parallelization, dependency pruning)
- Compliance Awareness
Nice to have:
- Artifact signing / attestations (cosign, OCI)
- GitOps or release automation experience
- GCP/AWS cloud experience
Client and contract: lead international bank | B2B
️ Recruitment: phone screen with our recruiter + 2 on-line meetings with hiring managers
️ Hybrid work: 6 days per month from the office in Cracow
Verita HR is an international company providing recruitment support within #Fintech, #Finance and #Banking market in EMEA. We connect the most innovative organizations with the best people in the market. We conduct systematic market research, which allows our Digital Teams to be a step ahead of the competition.
We are looking for a highly experienced Senior DevSecOps | CI/CD Engineer to join a platform engineering team. The role focuses on designing, building and maintaining secure, efficient CI/CD pipelines and improving the organization’s software supply-chain security posture. You will work on pipeline optimization, Python tooling, artifact integrity, security scanning and mentoring engineers on DevSecOps best practices.
What's in it for you?
- Prestigious position at one of the world's largest banks
- Stable, long-term projects
- Hybrid work (6 days per month from the office in Cracow) and flexible working hours
- Working with modern IT technologies
- Growth and development opportunities with the possibility to move between projects
- Private healthcare and multisport card
- Referral program, free parking and company events
,[ Design and maintain Groovy pipeline steps (build, test, package, scan, deploy), Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container), Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch), Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling), Refactor legacy scripts (remove global state, consolidate hashing, standardize templates), Document https://jobeax.com/link/pUIUXUtzb8fZLmk3 standards and usage patterns, Mentor engineers on secure pipeline development and supply-chain practices, troubleshoot and prevent pipeline incidents] Requirements: DevSecOps, Jenkins, Groovy, Python, Helm, CI/CD Pipelines, Cloud Tools: Agile, Scrum. Additionally: Sport subscription, Private healthcare, Flat structure, Small teams, International projects, Free coffee, Canteen, Bike parking, Playroom, Shower, No dress code, In-house hack days, Modern office, Free beverages, Free parking.