We aretech transformationspecialists, we areCI&T.
We combine the disruptive power of Artificial Intelligence with human expertise to support large companies in navigating changes in technology and business. With 30 years of experience, 6,000 workers, offices in 10 countries and talents across 5 continents. We operate in the fields of design, strategy, and engineering for global brands, helping clients achieve the full potential of technology as a force for good. Impact is what we deliver.
Mission:
As a DevSecOps Architect, your mission is to design and implement secure and efficient CI/CD pipelines that integrate security practices throughout the software development lifecycle. You will collaborate with engineering teams to foster a culture of security and automation, ensuring that development practices align with industry standards and best practices.
Responsibilities:
- Design and implement secure and efficient CI/CD pipelines that streamline development and deployment processes.
- Collaborate with development and operations teams to integrate security practices into the CI/CD workflow, ensuring that security is a fundamental aspect of the development lifecycle.
- Develop and document DevSecOps strategies that promote secure coding, testing, and deployment practices.
- Identify and address potential security vulnerabilities in the CI/CD processes and recommend appropriate mitigation strategies.
- Stay updated on industry trends, tools, and methodologies related to DevSecOps and CI/CD to continuously improve practices and solutions.
- Conduct training and workshops to promote security awareness and best practices among engineering teams.
- Collaborate with cross-functional teams to ensure successful integration of security tools and processes within existing workflows.
Requirements:
- Proven experience in designing and implementing CI/CD pipelines using tools such as Jenkins, GitLab CI, CircleCI, or similar.
- Strong understanding of DevSecOps principles and practices, including secure coding and application security.
- Familiarity with containerization technologies (e.g., Docker, Kubernetes) and cloud platforms (e.g., AWS, Azure, GCP).
- Knowledge of scripting languages for automation (e.g., Python, Bash).
- Excellent problem-solving skills and the ability to work collaboratively in a team environment.
- A proactive and innovative mindset with a passion for continuous improvement in security and development practices.
- Advanced English level.
Nice to Haves:
- Relevant certifications in DevSecOps, CI/CD, or cloud security (e.g., Certified DevSecOps Professional, AWS Certified DevOps Engineer).
- Experience with security tools and practices, such as static and dynamic code analysis, vulnerability scanning, and penetration testing.
- Familiarity with configuration management tools (e.g., Ansible, Terraform) and Infrastructure as Code (IaC) principles.
- Understanding of compliance frameworks and security standards (e.g., OWASP, NIST).
#LI-SC1
#MidSenior
Our benefits include:
- Premium Healthcare
- Meal voucher
- Maternity and Parental leaves
- Mobile services subsidy
- Sick pay-Life insurance
- CI&T University
- Colombian Holidays
- Paid Vacations
And many others.
CI&T is an equal-opportunity employer. We celebrate and appreciate the diversity of our CI&Ters' identities and lived experiences. We are committed to building, promoting, and retaining a diverse, inclusive, and equitable company and culture focused on creating a better tomorrow.
At CI&T, we recognize that innovation and transformation only happen in diverse, inclusive, and safe work environments. Our teams are most impactful when people from all backgrounds and experiences collaborate to share, create, and hear ideas.
Before applying for our opportunities take a look atConflict of Interest Policyon website.
We strongly encourage candidates from diverse and underrepresented communities to apply for our vacancies.
The information provided is confidential and solely for the purposes of the relevant selection process and for the development of the company's inclusion and diversity agenda, this information will never be used for the purposes of discrimination.