DevOps integration on Multicloud security & compliance

About the project :

At Orange we are working on providing Security alerting and compliance reporting for Multicloud area. We are seeking a skilled Multicloud Security and Compliance Tool DevOps Integrator to enhance our cloud security posture and ensure compliance across multiple cloud environments. The ideal candidate will have a strong background in DevOps practices, integration experience, cloud security, and compliance frameworks.

Joining the Multicloud Security team experience means having the assurance of participating in a human adventure in a motivating, international, challenging, and innovative work environment.

Responsibilities 

• Integration: Implement and integrate security and compliance tools across various cloud platforms (AWS, Azure, GCP) and Orange Internal systems: (SIEM, IAM, ticketing systems, derogation area, reporting tools, SOAR systems and so on),

• Automation: Develop and maintain CI/CD pipelines for security and compliance tools.

• Monitoring: Set up monitoring and alerting systems for security incidents and compliance violations.

• Collaboration: Work closely with development, security, and operations teams to ensure security best practices are followed.

• Documentation: Create and maintain documentation for security processes, tool configurations, and compliance requirements.

• Training: Provide training and support to team members on security and compliance tools and practices

• Identify bottlenecks, performance issues, and security issues through insights, and propose solutions for improvement

• Work closely with operations and security teams to ensure the availability and resilience of the Multicloud Security & Compliance

• Manage development, testing and production environments

• Implement monitoring and alerting strategies to ensure application availability and performance.

Requirements:

• 2+ years’ experience with GCP or Azure or AWS hypescalers

• Master orchestration and deployment tools such as Kubernetes, Docker, Terraform, Ansible, Git, repository and artifact management, etc.

• Good knowledge and hands on experience using API Gateway, Apigee, Kong, NodeJS (Typescript), et API IDP ecosystem 

• Have programming skills with experience using languages such as Python

• Master the principles of the DevOps approach (application life cycle management, testing/analysis/code quality processes, GitOps)

• Have skills in application security (SecOps) and processes/best practices for securing CI/CD environments (DevSecOps)

• Hands-on experience with data pipelines and analytics tools (BigQuery, Pub/Sub, Dataflow, Looker)

• Ability to work collaboratively and build relationships with internal, remote and external stakeholders 

• Ability to capitalize, synthesize and transmit

• Strong problem-solving skills, analytical mindset, and ability to work in a fast-paced environment.

• A fervent advocate for innovation, committed to developing solutions that meet real-world needs

• Bachelor’s degree in computer science, Engineering, or related field

• You are fluent in English and Polish (read, written and spoken), French is a plus

What we offer:

• A dynamic, innovative environment with a focus on quality and collaboration

• Attractive compensation and benefits package

• Possibility to work in international environment

• The opportunity to grow a team of professionals