REQUIRED SKILLS

• Master’s degree in Computer Science, Information Technology, or a related field.
• Several years of experience as a DevSecOps engineer and architect, combined with leadership experience.
• Profound knowledge in the automation of CI/CD processes, IaC and in the use of modern DevSecOps tools (e.g. Azure DevOps, Docker).
• Working experience with hybrid infrastructures (on-premise & cloud, preferably Azure).
• Solid background in security standards and compliance frameworks (e.g. ISO 27001, SOC2 Type 2), identity management, network security, encryption, threat modeling, vulnerability management
• Very good understanding of software development, security and operational processes.
• Excellent communication and leadership skills, decision making and experience in working across sites in an intercultural environment.
• Innovative strength, analytical thinking and structured way of working.
• Very good written and spoken German and English skills.

• Establishment, management and further development of the DevSecOps department, spanning our development sites Munich and Gurugram.
• Responsibility for the DevSecOps practices across several products/solutions and teams.
• Development and implementation of the DevSecOps strategy and roadmap, comprising on-premise as well as cloud infrastructure, IaC and CI/CD processes and tools.
• Ensuring and continuously improving security, efficiency and quality along the entire software supply chain (on-premise and cloud).
• Selection, introduction and further development of modern DevSecOps tools, technologies, methods and best practices.
• Promotion of a DevSecOps mindset culture and know-how transfer to the development teams.
• Monitoring and optimization of build, test, release and deployment processes, on-premise and cloud.
• Working closely with other departments such as Solution Architecture, Software Engineering Excellence, Cyber Security, Quality Assurance and Corporate Security and Corporate IT.
• Identification and implementation of innovations in the areas of automation, monitoring, security and compliance.
• Responsibility for adherence to security and compliance requirements in all development and operational processes.