Senior DevOps Engineer (1.5‑month contract)

About the role

We are looking for a Senior DevOps Engineer to join our team for a 1.5‑month project. You will be responsible for operating, securing, and automating our on‑premise environments across the full lifecycle, from development to production.

Key responsibilities

• Operate and maintain on‑premise infrastructure in DEV, TEST, STAGING, UAT, and PROD environments.
• Implement network zoning and environment segregation (External / DMZ / Internal).
• Configure and support Web Application Firewalls (WAF) and control traffic flows between zones.
• Manage External and Internal API Gateways and enterprise integrations via the Software AG platform.
• Operate identity and access management infrastructure, including miniOrange IdP, MFA, and OIDC integrations.
• Design, maintain, and run CI/CD pipelines using Azure DevOps with secure release promotion.
• Implement Secure SDLC controls (SAST, SCA, DAST) and threat modeling (STRIDE).
• Set up monitoring, logging, and audit capabilities (Prometheus, Grafana, Graylog, Sentry, SIEM forwarding).
• Support backup, replication, and disaster‑recovery activities, including DR testing.

Required profile

• 5+ years of experience in DevOps or Infrastructure Engineering.
• Proven experience with on‑premise infrastructure deployment and multi‑environment management.
• Strong knowledge of network security zoning, WAFs, API Gateways, and enterprise integration platforms.
• Hands‑on experience with identity providers (miniOrange), OIDC/OAuth2, MFA, TLS/mTLS, and PKI.
• Extensive experience building CI/CD pipelines in Azure DevOps and applying Secure SDLC practices.
• Familiarity with monitoring and observability tools and disaster‑recovery processes.

Required skills

• On‑premise infrastructure management
• Network security zoning (External/DMZ/Internal)
• Web Application Firewall (WAF)
• API Gateway configuration
• Software AG integration platform
• miniOrange IdP, OIDC/OAuth2, MFA
• TLS/mTLS, PKI certificate management
• Azure DevOps CI/CD pipelines
• Secure SDLC (SAST, SCA, DAST)
• Threat modeling (STRIDE)
• Prometheus, Grafana, Graylog, Sentry, SIEM integration
• Backup, replication, disaster‑recovery testing