DevSecOps Architect / Technical Lead (Fintech)

Location: Worldwide; a one-week on-site onboarding with the client in Slovenia is required, with travel and accommodation expenses covered.

Salary: EUR 4,600–6,900 per month gross. Additional annual bonus of up to EUR 1,000 per month may be available depending on expertise and participation in company activities.

Company

hirify.global is an IT services company delivering technology projects for clients in financial services, healthcare, retail, telecom, and other industries.

What you will do

• Translate the DevSecOps master plan into a practical implementation roadmap, architecture decisions, and engineering standards.
• Define reusable CI/CD, security, release-management, vulnerability-management, audit-evidence, and incident-response processes.
• Support the migration from Bitbucket and Jenkins to Azure Repos and Azure Pipelines.
• Implement security scanning, release gates, artifact signing, SBOM generation, and secure artifact promotion.
• Configure security controls for Azure Kubernetes Service, container images, identities, secrets, and certificates.
• Integrate security events with monitoring and SIEM solutions while providing technical leadership, knowledge transfer, configuration, integration, and troubleshooting support.

Requirements

• 5+ years of experience in DevSecOps, cloud security, or platform security, including ownership of architecture, standards, and adoption across multiple teams.
• Strong hands-on experience with Microsoft Azure, Kubernetes and container security, preferably AKS, and Infrastructure as Code, preferably Terraform.
• Hands-on experience implementing CI/CD security controls such as SAST, SCA, DAST, secret scanning, IaC scanning, and container scanning.
• Experience with identity, secrets, certificate management, SBOM, artifact signing, provenance, and secure artifact promotion.
• Ability to combine architecture and technical leadership with hands-on implementation, troubleshooting, mentoring, and cross-team collaboration.
• English: Upper-Intermediate level or higher.

Nice to have

• Experience in banking, financial services, or another regulated industry.
• Experience with Jenkins, Bitbucket, Azure DevOps, Azure Key Vault, Azure Container Registry, Defender for Cloud or Containers, and Microsoft Sentinel.
• Experience with SonarQube, Sonatype, Gitleaks, Checkov, OWASP ZAP, DefectDojo, or similar security tools.
• Experience with policy-as-code, Azure Policy, OPA, Gatekeeper, vulnerability management, SIEM, DORA, audit traceability, and segregation of duties.

Culture & Benefits

• Remote, office, and hybrid work formats are available.
• One-week on-site onboarding in Slovenia is required; travel and accommodation are fully covered.
• Professional, financial, and career development supported through mentoring, onboarding, and a corporate training portal.
• Certification compensation, private health insurance, and sports compensation depending on the type of employment.
• Corporate activities, referral program, and additional annual bonus opportunities.