CI/CD Engineer – Automation & DevSecOps Specialist

About the role

We are looking for a seasoned CI/CD Engineer to own and automate our software delivery pipelines. In this role you will design robust Continuous Integration and Continuous Deployment workflows that eliminate manual bottlenecks, ensure security, and enable rapid, reliable releases across web, database, and machine‑learning components.

Key responsibilities

• Design, build, and optimise multi‑stage pipelines for compilation, testing, security scanning and deployment.
• Integrate static code analysis, vulnerability alerts, secret‑scanning and container validation into the delivery flow.
• Manage secure artifact storage, image repositories and dependency management systems.
• Implement zero‑downtime deployment patterns such as blue‑green, canary releases and automated rolling updates.
• Standardise environment automation runbooks, branch strategies and telemetry tracking for development teams.

Required profile

• 5+ years of hands‑on experience building automated deployment infrastructure and enterprise CI/CD pipelines.
• Proven ability to create pipelines for web applications, databases and machine‑learning components.
• Experience with CI/CD platforms such as Azure DevOps Pipelines, GitLab CI, Jenkins or GitHub Actions.
• Strong knowledge of Infrastructure‑as‑Code tools (Terraform, ARM Templates, Ansible, Pulumi).
• Hands‑on experience with Docker, Kubernetes, Azure Kubernetes Service, Azure Container Registry and Docker Hub.
• Solid understanding of DevSecOps practices, including static analysis, vulnerability and secret scanning, and secure dependency management.
• Experience managing artifact repositories and code‑quality tools (Azure Artifacts, SonarQube, Sonatype Nexus, JFrog Artifactory).

Required skills

• Azure DevOps Pipelines
• GitLab CI
• Jenkins
• GitHub Actions
• Terraform
• ARM Templates
• Ansible
• Pulumi
• Docker
• Kubernetes
• Azure Kubernetes Service (AKS)
• Azure Container Registry (ACR)
• Docker Hub
• Static code analysis
• Vulnerability scanning
• Secret scanning
• Container image validation
• Azure Artifacts
• SonarQube
• Sonatype Nexus
• JFrog Artifactory
• Scripting (e.g., Bash, PowerShell)