[5426]Support for DevSecOps Engineering

Start date: 16 October 2025
Clearance: NATO Secret
Location: Remote

Skills:

• In-depth knowledge of Microsoft Azure Cloud IaaS/PaaS Services
• Proficiency in designing, deploying and managing landing zones in Microsoft Azure by leveraging IaC and CI/CD pipelines
• Expertise in managing governance controls such as Azure Policy
• Experience in building, deploying and maintaining containerized workloads using Azure Kubernetes Services (AKS)
• Experience in managing deploying and monitoring Azure Virtual Machines (VMs)
• Expertise in enabling secure and reliable access to applications for end-users
• Strong analytical skills to assess and improve DevSecOps processes and workflows
• Ability to troubleshoot complex Microsoft Azure Services issues and implement effective solutions
• Understanding of security best practices and compliance requirements related to Microsoft Azure services and DevSecOps practices
• Experience conducting audits and ensuring adherence to regulatory standards
• Excellent communication skills to effectively collaborate with IT teams, stakeholders, and end-users
• Ability to document processes clearly and provide training on Microsoft Azure Services and DevSecOps practices
• Strong organizational skills to manage multiple tasks and priorities effectively
• The Contractor has strong customer relationship skills, including negotiating complex and sensitive situations under pressure
• Full proficiency in the English language. French language proficiency is of advantage.

Activities:

• Deploy and manage landing zones by utilizing DevSecOps practices to ensure a secure, scalable foundation for cloud workloads
• Deploy and manage cloud workloads on top of the landing zones in an automated fashion
• Utilize Infrastructure as Code and CI/CD pipelines through Azure Devops
• Build, deploy and maintain containerized workloads using Azure Kubernetes Services (AKS)
• Deploy and monitor Azure Virtual Machines (VMs), including sizing, patching, backup, performance tuning and cost optimization
• Build and maintain automated disaster recovery and backup solutions using services like Azure Backup, Site Recovery and storage replication
• Monitor the performance and effectiveness of landing zones and cloud workloads
• Identify opportunities for improvement and implement optimizations to enhance security and efficiency
• Manage secure and reliable access to applications for end-users including configuration of Azure Application Gateways, Azure load-balancers and custom domains
• Monitor Application availability, performance and security using services such as Azure Monitor, Log Analytics, Application insights and configure automated alerts
• Provide support for Microsoft Azure Services
• Related issues, including troubleshooting access, networking and cloud resource specific issues
• Implement and manage governance controls such as Azure policies to ensure compliance with organizational standards
• Ensure all deployed workloads and services adhere to Zero trust security principles, including proper network segmentation, identity-base access control and logging
• Conduct regular audits and reviews of access controls and permissions
• Collaborate with IT security, compliance, and other relevant teams to ensure cohesive cloud resources management strategies
• Contribute to the lifecycle of cloud secure products in collaboration with the CTO CCOE to ensure reusable, secure and automated infrastructure modules
• Communicate effectively with stakeholders to understand IaaS and Paas requirements and address concerns
• Identify opportunities to enhance efficiency through automation and proactively implement solutions
• Champion continuous improvement by evaluating new Azure capabilities, DevOps tools and security practices and integrate them into operations