DevSecOps Engineer (Jenkins, Python) w Kraków, Polska

• 7+ years engineering; 3+ in CI/CD platform or DevSecOps
• Strong Jenkins + Groovy shared library expertise
• Advanced Python automation (JSON/YAML processing, tooling scripts)
• Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata
• Supply-chain security (SLSA, CycloneDX SBOM, digests)
• Experience with SonarQube, Sonatype IQ, container and SAST scanning
• Proven performance tuning (caching, parallelization, dependency pruning)
• Compliance Awareness

Nice to have:

• Artifact signing / attestations (cosign, OCI)
• GitOps or release automation experience
• GCP/AWS cloud experience

Client and contract:  lead international bank | B2B
️ Recruitment: phone screen with our recruiter + 2 on-line meetings with hiring managers
️ Hybrid work: 6 days per month from the office in Cracow

Verita HR  is an international company providing recruitment support within #Fintech, #Finance and #Banking market in EMEA. We connect the most innovative organizations with the best people in the market. We conduct systematic market research, which allows our Digital Teams to be a step ahead of the competition.

We are looking for a highly experienced Senior DevSecOps | CI/CD Engineer to join a platform engineering team. The role focuses on designing, building and maintaining secure, efficient CI/CD pipelines and improving the organization’s software supply-chain security posture. You will work on pipeline optimization, Python tooling, artifact integrity, security scanning and mentoring engineers on DevSecOps best practices.

What's in it for you?

• Prestigious position at one of the world's largest banks
  
• Stable, long-term projects
• Hybrid work (6 days per month from the office in Cracow) and flexible working hours
• Working with modern IT technologies
• Growth and development opportunities with the possibility to move between projects
• Private healthcare and multisport card
• Referral program, free parking and company events

,[ Design and maintain Groovy pipeline steps (build, test, package, scan, deploy), Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container), Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch), Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling), Refactor legacy scripts (remove global state, consolidate hashing, standardize templates), Document https://jobeax.com/link/pUIUXUtzb8fZLmk3 standards and usage patterns, Mentor engineers on secure pipeline development and supply-chain practices, troubleshoot and prevent pipeline incidents] Requirements: DevSecOps, Jenkins, Groovy, Python, Helm, CI/CD Pipelines, Cloud Tools: Agile, Scrum. Additionally: Sport subscription, Private healthcare, Flat structure, Small teams, International projects, Free coffee, Canteen, Bike parking, Playroom, Shower, No dress code, In-house hack days, Modern office, Free beverages, Free parking.