Devsecops engineer

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.

Your Role

• Implement, operate, and enforce security controls across CI/CD pipelines, cloud platforms, and application environments.
• Configure and maintain secure baseline templates, pipeline standards, and automation frameworks.
• Integrate and manage security tools within the SDLC. Manage Identity and Access Management (IAM) using Entra ID, RBAC, and platform security controls.
• Execute access provisioning, modification, and de-provisioning activities.
• Automate onboarding processes and security workflows, including ServiceNow integrations. Troubleshoot and resolve CI/CD, identity, and security tool-related issues.
• Monitor security control coverage, pipeline health, and vulnerability remediation metrics.
• Support audits, compliance assessments, attestations, and evidence collection activities. Investigate security incidents and assist with incident response activities.
• Create and maintain operational documentation, SOPs, and implementation guides.
• Drive continuous improvement in DevSecOps automation, tooling, and processes.

Your Profile

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or 10 years of equivalent hands-on professional experience.
• Strong knowledge of DevSecOps and Secure SDLC practices.
• Experience securing CI/CD pipelines and implementing security controls.
• Proficiency in Python, Java, Shell Scripting, or similar languages.
• Hands-on experience with SAST, DAST, SCA, and Secrets Scanning tools.
• Understanding of secure coding practices and application security.
• Experience with cloud platforms and cloud security controls (AWS/Azure/GCP).
• Knowledge of Infrastructure as Code (Terraform, Ansible).
• Strong understanding of IAM, authentication, authorization, and least-privilege principles.
• Experience with Docker and Kubernetes. Knowledge of networking fundamentals and secure architecture design.
• Experience in vulnerability management, remediation, and risk mitigation.
• Strong troubleshooting, analytical, and problem-solving skills.
• Experience with logging, monitoring, and security event analysis.

What you'll love about working here

• You can shape your career with us. We offer a range of career paths and internal opportunities within Capgemini group. You will also get personalized career guidance from our leaders.
• You will get comprehensive wellness benefits including health checks, telemedicine, insurance with top-ups, elder care, partner coverage or new parent support via flexible work.
• At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges.
• Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organizations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2024 global revenues of €22.1 billion.

Make it real | www.capgemini.com