DevOps Engineer

Cavendish Professionals are looking to speak to Senior Software Engineers specialising in Go and Java development to join an exciting client with offices all over Central Europe, on a hybrid basis. The successful candidates will play a key role in designing, building and securing enterprise-level applications and platforms, with a particular focus on software supply chain security and secure development practices. The role will involve developing scalable, cloud-native applications, optimising CI/CD pipelines and embedding security throughout the software development lifecycle (SDLC).

Skills and Requirements:

• 5+ years' experience in enterprise software engineering.
• Strong hands-on proficiency in Go (Golang) and Java.
• Deep understanding of distributed systems, microservices, APIs and software design patterns.
• Extensive experience implementing and managing CI/CD pipelines, including GitHub Actions, GitLab or Jenkins.
• Strong knowledge of Secure Development Lifecycle (SDL) practices and secure coding.
• Understanding of software supply chain security, including SBOMs, dependency management and vulnerability management.
• Experience with Docker and Kubernetes.
• Familiarity with AWS, Azure or Google Cloud.
• Preferred experience with Software Composition Analysis (SCA) tools and DevSecOps. Zero Trust architecture and policy-as-code, and ideally certifications include CSSLP, CISSP or Security+.

Role and Responsibilities:

• Design, develop and maintain enterprise-grade software solutions using Go and Java.
• Build scalable and secure applications based on cloud-native architectures.
• Lead code reviews, contribute to system design and technical strategy, and evaluate and integrate open-source technologies.
• Implement and manage security controls across software dependencies, build systems and deployment processes.
• Drive the adoption of SBOMs, dependency management and artifact integrity controls.
• Collaborate with Cybersecurity teams to develop solutions that mitigate vulnerabilities in open-source components.
• Design and optimise CI/CD pipelines, integrating automated security testing, including code scanning and dependency analysis.
• Develop automation to support continuous integration, testing and secure deployments.
• Promote Infrastructure-as-Code (IaC) best practices.
• Champion and embed Secure Development Lifecycle (SDL) practices throughout the organisation.
• Conduct threat modelling and security design reviews, and support the remediation of security findings.

For more information – please apply for this job or send your CV directly and I will call you back to provide you with more details.

Cavendish (Recruitment) Professionals Ltd are proud to be an equal opportunity employer and we believe that inclusivity begins with the candidate experience. All qualified applicants will receive consideration for employment regardless of, gender, race, age, sexual orientation, religion, or belief.