Design, implement, and maintain Groovy-based Jenkins pipeline steps for build, test, packaging, scanning, and deployment.
Extend and refine Python tooling for SLSA provenance, SBOM generation, hash/digest verification, and security scan aggregation (SonarQube, Sonatype IQ, SAST, container scans).
Optimize pipeline performance through parallelization, caching, and smart dependency management.
Ensure artifact integrity, reproducible builds, and accurate cryptographic mappings (SHA1/SHA256).
Refactor legacy scripts for stability and compliance, apply standard templates, and eliminate global state issues.
Define and document https://jobeax.com/link/pUIUXUtzb8fZLmk3 standards and enforce usage patterns.
Mentor teams on DevSecOps best practices, supply chain security, and secure pipeline design.
Troubleshoot and proactively prevent pipeline incidents across environments.
Note: Detailed project information will be shared during the recruitment process.
Our requirements
Minimum 7+ years in engineering roles, with 3+ years in DevSecOps or CI/CD platform engineering.
Strong hands-on expertise with Jenkins Shared Libraries (Groovy).
Advanced Python programming for automation, YAML/JSON parsing, and tooling development.
Solid understanding of multi-language build pipelines: Java/Maven, Node/NPM, Python, with exposure to Helm, Terraform, and container image metadata handling.
Deep knowledge of supply chain security standards (e.g., SLSA, SBOM via CycloneDX, artifact digests).
Experience with static and container scanning tools: SonarQube, Sonatype IQ, SAST.
Proven ability in build optimization techniques, caching, and dependency pruning.
Compliance Awareness & Documentation Discipline.
What we offer
Flexible cooperation model – choose the form that suits you best (B2B, employment contract, etc.)
Hybrid work setup – 6 days a month from the office in Kraków
Collaborative team culture – work alongside experienced professionals eager to share knowledge
Continuous development – access to training platforms and growth opportunities
Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
High quality equipment – laptop and essential software provided
DevSecOps Engineer Miejsce pracy: Kraków Technologies we use Expected - Jenkins - Groovy - YAML - JSON - Python - Helm - Terraform - SonarQube - Sonatype IQ - SAST Operating system - Windows About the project Are you an expert in CI/CD platforms with a strong security mindset? We are seeking a DevSecOps Engineer to design ...
... IT talents with technology projects for leading enterprises across Europe. Are you passionate about secure, high-performance CI/CD systems and cutting-edge DevSecOps practices? We are looking for a DevSecOps Engineer to own and evolve our Jenkins Shared Library, which powers multi-language builds including Java/Maven, Node/NPM, ...
We are looking for an experienced DevSecOps Engineer to drive end-to-end software supply chain security and enterprise CI/CD platform engineering across a cloud-native Kubernetes ecosystem on Google Cloud Platform (GCP). In this role, you will bridge software engineering and platform security, championing DevSecOps practices, ...
DevSecOps Engineer Miejsce pracy: Warszawa Technologie, których używamy Wymagane - Linux - Elasticsearch - Kibana Mile widziane - Kubernetes - OpenShift - ArgoCD - FluxCD - HashiCorp Vault O projekcie Poszukujemy DevSecOps Engineera, który dołączy do zespołu odpowiedzialnego za utrzymanie i rozwój środowisk produkcyjnych ...
About the Role We are looking for an experienced DevSecOps Engineer to develop and improve CI/CD tooling and secure software delivery processes. The role focuses on pipeline automation, build efficiency, security integration, and software supply-chain best practices. - Strong experience in DevOps, DevSecOps, or CI/CD engineering. ...
- Proven experience as a DevSecOps Engineer, DevOps Engineer or in a similar role. - Strong hands-on experience with Azure DevOps, particularly CI/CD and automation capabilities. - Experience working in large-scale enterprise environments, preferably in the context of modernization or transformation initiatives. - Good ...
... security – Google Cloud Security & Compliance at enterprise scale, powered by cutting-edge tooling and AI-supported automation. You'll step in as a Senior GCP DevSecOps Engineer , working within the Global Cloud Services – Google Cloud Security & Compliance team as a trusted advisor and hands-on contributor. Your role will ...
... pipelines designed to boost speed and reliability. You'll also tap into AI-driven insights, helping you make smarter decisions, faster. We’re looking for a Senior DevSecOps Engineer to join our team, where you’ll have the chance to grow your career while solving impactful, high-scale problems. This role is centered on securing ...
... i Java, z wykorzystaniem również JavaScript/Python. - Projektowanie i optymalizacja procesów CI/CD oraz automatyzacja testów i wdrożeń. - Wdrażanie praktyk DevSecOps i Secure Development Lifecycle (SDL). - Integracja narzędzi do automatycznej analizy kodu, zależności i bezpieczeństwa. - Praca z Docker, Kubernetes oraz Infrastructure ...
Expected, Linux, CI / CD Operating system, Linux About the project, As a Senior DevSecOps Engineer, you will design and maintain secure CI/CD environments, build automated deployment pipelines, and support cloud and on-prem infrastructure. You will test and document solutions, advise project teams on DevOps automation, ...