DevSecOps Analyst-Programmer, IT Security

As part of a multidisciplinary and agile team, you will develop and maintain the internal tools that support the organization's security posture. The role is primarily development-oriented: you will design new solutions, enhance existing ones, and support other developers in the delivery of their applications.

• Develop new software solutions and maintain existing ones.
  
• Act as an advisor for the development of automation on existing platforms.
  
• Prepare, document, and implement the infrastructure and tools for the platforms.
  
• Participate in the evolution and updates of the various platforms.
  
• Support fellow developers in implementing their application delivery solutions.
  
• Investigate and resolve production incidents.
  
• Technology environment: Nautobot, Python, Django, AKS, Azure DevOps, infrastructure as code.
  
• The client is looking for a developer, not a platform engineer. The explicit mention of "We are looking for a Programmer Analyst/Developer" immediately clarifies the DevOps/DevSecOps title of the position: the majority of the tasks involve writing and maintaining internal software to support the Movement's security posture. The trio of Nautobot, Python, and Django designates a specific profile: one who builds internal tools around a network repository, not a CI/CD or operations pipeline profile.
  
• DevOps skills (AKS, Azure DevOps, IaC) support the deployment of the candidate's development; they are not the primary focus of the role. Network knowledge (firewalls, Active Directory, DNS) is considered generic by the client: it allows the developer to understand the domain they are equipping, not to administer it.
  

The role is positioned within an agile team, with the expectation of providing guidance to fellow developers and resolving production incidents.

Main Responsibilities:

• Contribute to deliverables within the domain that are of significant scope and impact for the company
  
• Develop new solutions and maintain existing ones
  
• Act as an advisor for the development of automation for existing platforms
  
• Prepare, document, and implement the infrastructure and tools for the platforms
  
• Participate in the evolution and updates of the various platforms
  
• Ensure the evolution and implementation of internal software related to maintaining the Movement's security posture
  
• Support and guide fellow developers in implementing their application delivery solutions
  
• Investigate and resolve production incidents

Requirements

Requirements Qualification Matrix

• Minimum 6 years of relevant experience
  
• Python and Django development
  
• Nautobot
  
• Transformation and implementation of DevSecOps platforms and processes
  
• DevOps environments (AKS, Azure DevOps, IaC, Compute)
  

Desirable.

• Telecom networking knowledge, firewalls, monitoring, Active Directory, DNS
  
• Data and analytics environments (ingestion, enablement, consumption, governance)
  

Asset

• Security processes and mechanisms (RBAC, ABAC, IAM)

Note: Network-related knowledge and the data/analytics block were originally identified by the client as "mandatory." However, the client characterized the networking requirements as generic, and the data/analytics component does not appear in any of the stated responsibilities. As such, both have been reclassified as desirable.

WHAT WE DON'T WANT

• DevOps engineer focused on pipeline operations without application code production.
  
• System, network, or Active Directory administrator without Python development experience.
  
• Generalist Python developer (web, data) without exposure to DevOps platforms or the security domain.
  
• Security analyst or consultant (GRC, SOC, compliance) without software development experience.
  
• Data engineer specializing in data ingestion and governance, without security tools.
  
• Candidates should have less than 6 years of relevant experience.