DevSecOps Architect / Technical Lead (FinTech)

Location: Poland; fully remote, office-based, or hybrid work options are available.

Company

Tech Duck is an international software development and outsourcing company delivering projects across financial services, healthcare, retail, telecom, and other industries.

What you will do

• Translate the DevSecOps master plan into a practical implementation roadmap and define reusable CI/CD, security, and release-management standards.
• Support migration from Bitbucket and Jenkins to Azure Repos and Azure Pipelines.
• Implement security scanning, release gates, artifact signing, SBOM generation, and secure artifact-promotion processes.
• Configure security controls for AKS, container images, identities, secrets, and certificates.
• Integrate platform security events with banking monitoring and SIEM solutions, and define vulnerability-management, audit-evidence, and incident-response processes.
• Provide technical leadership, knowledge transfer, configuration, integration, troubleshooting, and guidance to delivery teams.

Requirements

• 5+ years of experience in DevSecOps, cloud security, or platform security.
• Experience designing and driving DevSecOps processes, architecture, or engineering standards across multiple teams, rather than only implementing predefined solutions within one project.
• Experience translating high-level security or DevSecOps strategy into technical roadmaps, architecture decisions, standards, and implementation guidance.
• Experience owning technical decisions and driving DevSecOps adoption across engineering teams.
• Strong hands-on experience with Microsoft Azure.
• Hands-on experience implementing CI/CD security controls and gates, including several of SAST, SCA, DAST, secret scanning, IaC scanning, and container scanning.
• Practical experience with Kubernetes and container security, preferably AKS; experience with Infrastructure as Code, preferably Terraform.
• Experience with identity, secrets, and certificate management.
• Understanding of SBOM, artifact signing, provenance, secure artifact promotion, and software supply-chain security.
• Ability to combine architecture and technical leadership with hands-on implementation and troubleshooting, mentor or technically guide engineers, and work across development, platform, security, and architecture teams.
• Upper-Intermediate English or higher is required.

Nice to have

• Experience in banking or another regulated industry, including DORA, audit traceability, and segregation-of-duties requirements.
• Experience with Jenkins, Bitbucket, Azure DevOps migration, Azure Key Vault, Azure Container Registry, or Defender for Containers.
• Familiarity with SonarQube, Sonatype, Nexus, Gitleaks, Checkov, OWASP ZAP, DefectDojo, Microsoft Sentinel, or other vulnerability-management and SIEM solutions.
• Experience with Azure Policy, Gatekeeper, OPA, or Kubernetes admission controls.

Culture & Benefits

• Fully remote, office-based, or hybrid work options.
• Mentoring and onboarding systems with opportunities for professional, financial, and career growth.
• Corporate training portal and compensation for certifications such as AWS and PMP.
• Private health insurance and sports compensation, depending on the type of employment.
• Up to an additional 1,000 USD per month based on expertise and included in the annual bonus through participation in company activities.
• Corporate events, referral program, and team activities.