Software & DevOps Engineer

🚀 Software & DevOps Engineer | Go & Java | Software Supply Chain Security & DevSecOps

🌍 Remote | 📄 B2B Contract & Permanent Contract|

Our client, an in-house technology consultancy of a global consulting firm, is looking for an experienced Software & DevOps Engineer to design, build, and secure enterprise-level cloud platforms. In this role, you will take direct technical ownership of enhancing software supply chain security and embedding secure development lifecycle (SDL) practices across distributed systems and modern CI/CD automation pipelines.

What You’ll Be Doing:

• Designing, building, and maintaining enterprise-grade, cloud-native backend applications and services using Go (Golang) and Java.
• Leading code reviews, establishing technical strategy, and evaluating/integrating open-source components into production systems.
• Taking ownership of software supply chain security by implementing SBOM adoption, dependency governance, and artifact integrity controls.
• Designing and optimizing automated CI/CD pipelines with integrated security scanning ( SAST, dependency analysis, container scanning ).
• Embedding I nfrastructure-as-Code (IaC) best practices and continuous automated testing into daily deployment workflows.
• Driving Secure Development Lifecycle (SDL) practices , conducting threat modeling, and collaborating on security design reviews.

What We’re Looking For:

• 5+ years of commercial software engineering experience delivering scalable enterprise applications.
• Proven dual proficiency in Go (Golang) and Java across microservices, REST APIs, and distributed systems.
• Hands-on expertise in DevSecOps practices and end-to-end CI/CD automation (GitHub Actions, GitLab CI/CD, Jenkins).
• Consultant mindset: ability to lead security enhancements, collaborate effectively with cybersecurity squads, and guide engineering teams through architectural changes.
• Strong ownership, analytical problem-solving skills, and a commitment to secure coding standards.

Must-Haves:

• Strong core programming skills in Go (Golang) and Java.
• In-depth architectural understanding of distributed systems, cloud-native environments, and design patterns.
• Extensive commercial experience with CI/CD automation and pipeline security testing.
• Practical knowledge of Secure Development Lifecycle (SDL), threat modeling, and supply chain security (SBOM, artifact signing).
• Fluent English communication skills for daily international collaboration.

Location & Working Setup:

• Hybrid Work Model 2 days in the office (Warsaw, Łódź, Rzeszów, Poznań, Gdańsk, Szczecin, Wrocław)

If you are a software and DevSecOps engineer passionate about platform resilience, cloud architecture, and securing the modern software supply chain, apply today or reach out directly to connect!