DevOps Security Engineer

ABOUT THE OPPORTUNITY

We are looking for a DevSecOps Platform Engineer to contribute to automation, security integration and platform engineering initiatives within the banking sector, based in Porto or Lisbon, with a hybrid working model.

This role combines secure software delivery, infrastructure automation, platform engineering and AI-driven innovation. You will help establish scalable, secure and reusable engineering capabilities that improve operational resilience, development efficiency and security governance across technology teams.

WHAT YOU WILL DO

• Lead the design and implementation of secure CI/CD pipelines, automated infrastructure provisioning and standardized deployment processes.

• Integrate security validation, vulnerability scanning, dependency analysis and compliance controls throughout the software delivery lifecycle.

• Develop and maintain self-service engineering platforms that enable secure infrastructure provisioning, application deployment and operational management.

• Implement Infrastructure-as-Code and GitOps practices to improve configuration consistency, deployment traceability and security.

• Design secure containerized environments using orchestration technologies and automated infrastructure recovery mechanisms.

• Establish automated security gates, secrets management practices and policy-as-code controls to reduce manual validation activities.

• Evaluate emerging DevSecOps technologies through technical research, experimentation and proof-of-concept initiatives.

• Explore AI-driven automation for infrastructure management, security analysis, deployment operations and incident remediation.

• Define governance frameworks for AI agents, including authorization controls, privilege boundaries, audit trails, operational containment and human oversight.

WHAT WE ARE LOOKING FOR

• Bachelor's degree in Computer Science, Engineering or a related field, or equivalent professional experience.

At least 5 years of professional experience in DevSecOps, DevOps, infrastructure engineering, Site Reliability Engineering or related technical disciplines.

- At least 3 years of experience contributing to technical innovation, technology prototyping or architectural improvement initiatives.

• Strong experience designing and implementing secure automation solutions in complex enterprise environments.

• Proven ability to integrate security and compliance controls into development and operational processes.

• Experience improving engineering efficiency through automation, standardization and reusable technical solutions.

• Understanding of application security, infrastructure protection and secure software development practices.

• Ability to evaluate emerging technologies and translate technical findings into practical engineering recommendations.

TECHNICAL SKILLS

• CI/CD automation, Infrastructure-as-Code and GitOps.

• Docker, Kubernetes, OpenShift and Linux/Unix.

• Cloud platforms: AWS, Azure or GCP.

• DevSecOps, SAST/DAST, vulnerability scanning and secrets management.

• Security frameworks, policy-as-code and compliance automation.

• Monitoring and observability: Prometheus, Grafana, ELK or Datadog.

• Scripting with Python, Go, Java or Bash.

• AI agents, LLMs, AI governance and intelligent automation.

• DORA metrics and delivery optimization.

NICE TO HAVE

• Experience in banking or regulated industries.

• Argo CD, Flux, Istio or Linkerd.

• AI agent frameworks such as LangChain or AutoGen.

• AI-driven security and incident response.

WHAT WE OFFER

• Health insurance and confidential psychological support from day one.

• Continuous training, certification and cybersecurity and AI governance upskilling.

• Work-life balance initiatives and family support benefits.

• A collaborative environment with team activities and accessible leadership.

EQUAL OPPORTUNITY

Hexa promotes equal opportunities, diversity and inclusion, in alignment with the Portuguese Diversity Charter. We value different backgrounds, experiences and perspectives.

HEXA LIFE

At Hexa, we are all Builders. Guided by honesty, mutual support and agility, we share knowledge, embrace challenges and grow together. Every contribution matters.

We Build Together.