Mid-Level DevSecOps Engineer – CI/CD and Security Integration

Location: Portugal, with remote work of up to 2 days per week. Applicants must already have the legal right to work in the European Union.

Company

hirify.global provides technology and software solutions through client-focused engineering engagements.

What you will do

• Design, implement, and maintain CI/CD pipelines across multiple projects using GitLab CI, Azure DevOps, Jenkins, or equivalent tools.
• Develop dependency management workflows and administer artifact repositories such as Artifactory.
• Integrate security controls, vulnerability scanning, compliance checks, and software delivery safeguards into pipelines.
• Manage JFrog Xray or equivalent tools and maintain SBOMs using CycloneDX, SPDX, or similar standards.
• Collaborate with development and security teams to improve pipeline automation and DevSecOps practices.
• Monitor and troubleshoot pipeline performance, uptime, and reliability.

Requirements

• More than 3 years of experience in DevOps, CI/CD, and security integration.
• Hands-on experience designing and maintaining pipelines across multiple projects.
• Strong proficiency with GitLab CI, Azure DevOps, Jenkins, or equivalent CI/CD tools.
• Knowledge of dependency management, artifact repositories, Artifactory, JFrog Xray, security scanning, and vulnerability management.
• Understanding of SBOM standards, including CycloneDX and SPDX.
• Good command of English and French; existing EU work authorization is required.

Nice to have

• DevSecOps or Cloud Security certifications.
• Familiarity with containerization and orchestration technologies.

Culture & Benefits

• Hybrid work arrangement in Portugal with remote work available up to 2 days per week.
• Work with development and security teams on continuous improvement and secure software delivery.
• Exposure to modern DevSecOps practices and emerging security methodologies.