Senior DevSecOps Engineer (CI-CD pipelines) for NATO

Would you like to join the leading international intergovernmental organization? We are looking for a Senior DevSecOps contractor to support the modernization of the application deployment and delivery landscape. This is a highly hands-on role: the selected contractors must have extensive practical experience and be able to contribute from day 1 with minimal ramp-up. The main focus will be designing and implementing secure and modular CI/CD pipelines using Azure DevOps and GitLab CI/CD or Jenkins for building the images and deploying the service on multiple target deployments. This is a delivery-focused role. We are looking for engineers who can assess the current setup quickly, propose pragmatic improvements, and implement them directly. Important: we will only consider candidates whose primary professional experience is as a DevSecOps Engineer. Profiles coming mainly from software development, infrastructure, system administration, or security roles with only partial DevSecOps exposure will not be considered. Key responsibilities: Migrate containerized applications from Docker Compose to Kubernetes (k3s). Design, build, and maintain secure CI/CD pipelines in Azure DevOps and GitLab CI/CD or Jenkins. Integrate security controls into the delivery process, including static code analysis, dependency scanning, container image scanning, secrets detection, image signing, vulnerability management, and release gates. Support deployment automation, environment promotion, rollback, traceability, and release reliability. Work closely with development, infrastructure, and security teams to improve automation, resilience, and secure delivery practices. Troubleshoot and resolve build, deployment, and runtime issues across CI/CD and Kubernetes environments. Document implemented solutions and contribute to good DevSecOps practices across the team. Essential Qualifications & Experience: 6+ years of professional experience in DevSecOps, Platform Engineering, or closely related roles, with DevSecOps as the main professional focus. Strong hands-on experience with Docker and Kubernetes; experience with k3s is highly desirable. Proven experience transitioning workloads from Docker Compose to Kubernetes. Strong practical experience implementing CI/CD pipelines in Azure DevOps, plus GitLab CI/CD or Jenkins. Strong hands-on experience with DevSecOps and software supply chain security practices, including SAST, dependency scanning, container/image scanning, secrets handling, and image signing. Good understanding of cloud or hybrid infrastructure, Linux environments, and automation/scripting. Experience with Git-based workflows, Agile/Scrum delivery, and collaboration tools such as Azure DevOps, GitLab, and Jira. Strong troubleshooting, communication, and documentation skills. Good spoken and written English. If you've read the description and feel this role is a great match, we'd love to hear from you! Click "Apply for this job" to be directed to a brief questionnaire. It should only take a few moments to complete, and we'll be in touch promptly if your experience aligns with our needs. Apply To This Job