DevSecOps Engineer (IT Infrastructure Security/PAM) 🛡️

Warsaw-based opportunity with a hybrid model of work

As a Senior Infrastructure Integration Specialist (DevSecOps), you will be working for our client, a global financial institution known for delivering innovative banking solutions to millions of customers worldwide. You will join a dynamic Cyber Security & Networks team that drives infrastructure integration and security compliance across critical systems. The role focuses on managing the deployment, integration, and support of key applications in the secrets and privileged access management domain. You will also contribute to automation initiatives, vulnerability remediation, and cross-functional collaboration to ensure infrastructure meets evolving security and business needs.

Responsibilities

• Manage various franchise critical security application Infrastructure, specifically in secrets and privileged access management domain.

• Own and drive the deployment (from scratch), maintenance and L3 support of managed applications.

• Collaborate with various internal and external stakeholders/support teams and product vendors to manage all the aspects of the support process.

• Gather product requirements, deploy solutions mapped to business needs and continuously evaluate to stay current with evolving requirements.

• Size and procure the required hardware/software for new deployments and collaborate with various teams like system admin, DBA and others to build the required Infra.

• Work with client applications to provide integration/onboarding guidance.

• Facilitate security assessments and remediation to ensure safety and soundness.

• Document the product, process, and train L1/2 teams for BAU support.

• Automation of manual tasks and continuous review/upgrade of stale processes.

• Provide SME (Subject Matter Expert) support for the managed applications.

• Capacity, Performance and Stability reporting and Management.

• Lead initiative to develop/improve scripts and other programs for system monitoring and maintenance.

• Lead Infrastructure projects and facilitate security assessment and remediation for the infrastructure associated the applications in scope.

• Be responsible to assess the risk and associated impact of all operational issues and change events and react quickly to escalate to technology management in a timely manner when required.

• Continuously keep the Knowledge Share repository up to date.

• Work with demanding global partners within aggressive timelines; analyze and resolve technical problems with application, system, and network.

• Develop or modify IAM automation solutions

• Work on change creation and implementation

• Identify and remediate vulnerabilities

• Collaborate with the infrastructure team to address issues identified by multiple scanning solutions

• Monitor production alerts and review them as needed

• Collaborate with engineering and application teams to troubleshoot production bugs

• Perform IAM connector deployments and testing

• Schedule and configure automated jobs

• Provide L2 on-call support as needed

Required Technical Skills:

• Hands-on experience working with Linux and Windows Servers

• Proficiency in one or more of these scripting languages – Python, Unix Shell, Perl & PowerShell scripting.

• Experience/basic understanding of CHEF, Ansible, CI/CD.

• Good grasp of networking concepts and protocols

• DevOps/DevSecOps/SRE experience

• Experience with Web Servers/Application deployment

• Experience interacting with Web APIs using various protocols and framework (E.g. REST)

• Experience with RDBMS or NoSQL databases from application programmer’s perspective. Understanding of how to interface with these databases, analyze & write complex queries/procedures.

• Understanding of containerization and associated technologies like Kubernetes/OpenShift.

Good to Have

• Experience managing PAM services including CyberArk and Hashicorp Vault would be a big plus.

• Hands on experience with IGA including SailPoint & Omada Identity

• Programming experience in Python, Core Java, Perl, .NET languages

• SRE/DevSecOps Foundation Certification

• CyberArk Sentry, Hashicorp Vault Associate

• Cloud Certifications including AWS, GCP and Azure

• Security Certifications like CISM, CISSP, CISA, CompTIA Security+ / CASP+

• Operating System certifications like MCSA (Windows Server), RHCSA, RHCE, CompTIA Server+

We offer you:

ITDS Business Consultants is involved in many various, innovative and professional IT projects for international companies in the financial industry in Europe. We offer an environment for professional, ambitious, and driven people. The offer includes:

1. Stable and long-term cooperation with very good conditions
2. Enhance your skills and develop your expertise in the financial industry
3. Work on the most strategic projects available in the market
4. Define your career roadmap and develop yourself in the best and fastest possible way by delivering strategic projects for different clients of ITDS over several years
5. Participate in Social Events, training, and work in an international environment
6. Access to attractive Medical Package
7. Access to Multisport Program
8. Access to Pluralsight
9. Flexible hours & remote work

Internal job number #7197