Senior DevSecOps Architect (Part Time 1/5) - Permanent

Context

Our client acts as the supervisor of the financial sector and strives to ensure fair and correct treatment of financial consumers. Our client advocates for transparent and understandable financial products, a transparent functioning of the financial markets, proper financial services, and improved financial education

Our client is currently operating the datacenter edition of the following Atlassian products: Jira, Confluence, Bitbucket, and Bamboo. These products are used to manage a DEVSECOPS pipeline, software development projects, documentation wikis, internal service desks, and a CMDB.

Missions

• Review the documentation of the existing DevOps ecosystem

• Highlight risks related to security, scalability, and vendor dependency

• Assist the DevSecOps Engineer with designing a target DevSecOps architecture (self-hosted / on-premises)

• Ensure compatibility with Microsoft stack (.NET, potential Azure DevOps integrations) and existing infrastructure constraints

• Review and possibly extend the list of identified alternative solutions and products to the Atlassian ecosystem

• Identify issues pertaining to the migration from Atlassian products to selected alternatives and propose solutions

• Design a new DevSecOps architecture and define a progressive migration strategy away from the current one

• Assess impacts on end-users, development teams, security processes, and operations

• Assist with the review of procedures impacted by the replacement of Atlassian products

• Draft a migration plan, including a communication plan

• Support proof-of-concept deployments (optional but expected)

• Assist in initial pipeline implementation

• Provide documentation and knowledge transfer

Tools & Environment

• Atlassian datacenter edition products: Jira, Confluence, Bitbucket, Bamboo

• DevSecOps pipeline management

• Microsoft (.NET) stack and potential Azure DevOps integrations

• ITSM, ticketing, wiki, Git service, CI/CD pipeline design and automation

• Asset Management (CMDB) tools

• Application security tools: SAST, DAST, SCA, secrets management

• Package management tools