- Department
- Engineering
- Source
- Traffit
Description
At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe.
Are you passionate about secure, high-performance CI/CD systems and cutting-edge DevSecOps practices? We are looking for a DevSecOps Engineer to own and evolve our Jenkins Shared Library, which powers multi-language builds including Java/Maven, Node/NPM, Python, Helm, Terraform, and container images.
Your work will strengthen supply-chain integrity, deliver secure, provenance-rich pipelines (SLSA, SBOM, digests), and ensure a seamless developer experience across teams.
Sounds like your kind of challenge?
#LI-Hybrid
Benefits
7+ years of engineering experience, with 3+ years focused on CI/CD platforms or DevSecOps.Solid expertise in Jenkins, Kubernetes (K8s) and Groovy Shared Libraries.Advanced Python automation scripting (JSON/YAML processing, CLI tooling).Strong understanding of Maven, NPM, Python packaging; familiarity with Helm, Terraform, and container metadata.Hands-on experience with supply-chain security, including SLSA frameworks, SBOM formats (CycloneDX), and cryptographic digests.Security tools knowledge: SonarQube, Sonatype IQ, SAST, container scanning.Proven track record in performance optimization of CI/CD pipelines.Awareness of compliance and secure coding practices.Experience with artifact signing/attestations (e.g., cosign, OCI standards).Hands-on knowledge of publishing Terraform modules and Helm charts.Exposure to GitOps or automated release management.Proficiency with major cloud providers, especially GCP or AWS.