DevSecOps Engineer

WHO ARE WE?

We are a world leader in Engineering and IT Services.

At ALTEN, we see our specialists as architects – today’s designers of tomorrow’s world.

As a leader in Engineering and IT Services, we support a major company in their technological and sustainable transformation.

Over 57,400 employees in 30+ countries support more than 6,500 clients worldwide.

We operate in all sectors: Aeronautics, Space, Defence, Security & Naval, Automotive, Rail & Mobility, Energy & Environment, Life Sciences & Health, Industrial Equipment & Electronics, Telecoms, Banking, Finance & Insurance, Retail, Services & Medias, Public Services & Government.

We carry out complex and highly technical projects throughout the value chain of the most prestigious companies worldwide.

Our motto: Building Tomorrow’s World Today!

Own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supply-chain integrity across teams.

Role Description

• Design and maintain Groovy pipeline steps (build, test, package, scan, deploy).

• Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation

  (SonarQube, Sonatype IQ, SAST/Container).

• Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch).

• Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling).

• Refactor legacy scripts (remove global state, consolidate hashing, standardize templates).

• Document ci-config.yaml standards and usage patterns.

• Mentor engineers on secure pipeline development and supply-chain practices.

• Troubleshoot and prevent pipeline incidents.

Requirements

• 6+ years in engineering; 3+ in CI/CD platform or DevSecOps.

• Strong Jenkins + Groovy shared library expertise.

• Advanced Python automation (JSON/YAML processing, tooling scripts).

• Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata.

• Supply-chain security (SLSA, CycloneDX SBOM, digests).

• Experience with SonarQube, Sonatype IQ, container, and SAST scanning.

• Proven performance tuning (caching, parallelization, dependency pruning).

• Compliance Awareness.

We Offer

• Full-time employment contract.

• Location: Kraków, work model - hybrid

• Stable and long-term cooperation.

• Well-defined career path at the European leader in engineering & IT consulting.

• Opportunity to relocate and work in different ALTEN Polska branches.

• Introduction and cooperation with a dedicated Competences Manager.

Benefits:

• Medicover medical and dental care.

• Medicover Benefits platform.

• Medicover Sport card.

• Referral Program.

• Layette for a newborn employee’s child.

• Group life insurance.

• Pension scheme.

We also offer cooperation based on B2B or Contract of Mandate (UZ).

We Guarantee:

• Access to professional certifications (e.g., Google, ISTQB).

• Access to industry events.

• Access to the Knowledge Sharing Program.

• Access to the Referral Program.

Do not hesitate and join our team!

NOTICE: We kindly inform you that we will contact the selected people.