Associate DevSecOps Engineer

Job Posting Organization:
The European Investment Bank (EIB) is the bank of the European Union, established in 195

• It plays a crucial role in financing projects that contribute to the EU's objectives, including climate action, innovation, and infrastructure development. The EIB operates in multiple countries across Europe and beyond, employing thousands of staff members who work in a diverse and multicultural environment. The bank is committed to promoting sustainable development and fostering economic growth in the EU and its partner countries.

Job Overview:
The Associate DevSecOps Engineer position at the EIB is a full-time role that requires regular office presence at the bank's headquarters in Luxembourg. This position is integral to embedding security" style="border-bottom: 1px dotted #007bff !important;">security into every stage of the software delivery lifecycle. The successful candidate will work closely with experienced DevSecOps engineers, development teams, infrastructure teams, and security teams to build and enhance secure, automated, and compliant delivery pipelines and platforms. The role offers the opportunity to drive the adoption of DevSecOps practices across various teams and support resilient Continuous Integration/Continuous Deployment (CI/CD) pipelines and cloud environments. Additionally, the position provides hands-on exposure to vulnerability management, security monitoring, and modern secure software delivery in a collaborative and evolving technology environment.

Duties and Responsibilities:
The duties and responsibilities of the Associate DevSecOps Engineer include contributing to the operation and day-to-day support of the DevSecOps toolchain, ensuring the availability, stability, and secure configuration of platform components. The engineer will assist in maintaining secure CI/CD pipeline templates and shared components, applying platform standards and security baselines. They will support the rollout and adoption of the EIB Software Development Life Cycle (SDLC) framework, implementing mandatory quality gates, automated controls, and evidence collection mechanisms across delivery pipelines. The engineer will also assist in embedding security controls into the DevOps lifecycle, including static and dynamic code analysis, dependency and artifact scanning, secrets management, and infrastructure security checks. Collaboration with delivery teams is essential, acting as a first-line technical contact for GIS software delivery teams on DevSecOps and SDLC platform usage. The engineer will participate in communication and change management activities and contribute to the continuous improvement of DevSecOps and SDLC practices by documenting lessons learned and proposing enhancements to tooling and processes. Compliance with established security, risk, and compliance requirements is also a critical aspect of the role.

Required Qualifications:
Candidates must possess a university degree (minimum equivalent to a Bachelor) preferably in Computer Science, Information Technology, Engineering, or a related field. They should have at least three years of relevant professional experience in IT engineering roles related to DevOps, systems administration, cloud operations, software delivery, or security engineering. Basic hands-on experience with software delivery pipelines (CI/CD) and operational environments is required, ideally supporting development or platform teams. A foundational understanding of DevSecOps principles, including 'shift-left' security and automation of controls, is necessary. Introductory experience with cloud or virtualized environments (e.g., Azure, AWS, VMware, container platforms) is also expected, along with familiarity with infrastructure-as-code concepts and automated provisioning. Candidates should have basic proficiency in scripting or automation languages (e.g., Python, Bash, PowerShell) sufficient to read, adapt, and troubleshoot scripts.

Educational Background:
The educational background required for this position includes a university degree in a relevant field such as Computer Science, Information Technology, Engineering, or a related discipline. A minimum of a Bachelor's degree or its equivalent is necessary to qualify for this role.

Experience:
The position requires at least three years of relevant professional experience in IT engineering roles. This experience should be related to DevOps, systems administration, cloud operations, software delivery, or security engineering. Candidates should demonstrate a solid understanding of the principles and practices associated with DevSecOps and have practical experience in supporting development or platform teams.

Languages:
Proficiency in English is mandatory, and a good command of French is also required. Knowledge of other EU languages would be considered an advantage. Proficiency is understood to mean the attainment of level 5 of the Inter Institutional language courses, corresponding to B1.2 of the Common European Framework of Reference for Languages (CEFRL).

Additional Notes:
This position offers a permanent contract at grade 4 and is full-time. The EIB provides relocation support for candidates moving to Luxembourg. The recruitment process includes panel interviews, which are anticipated to begin in June 202

• The EIB values diversity and encourages all suitably qualified candidates to apply, regardless of their gender identity/expression, age, racial, ethnic and cultural background, religion and beliefs, sexual orientation, disability, or neurodiversity. The bank also emphasizes the importance of maintaining the security and integrity of its information and requires compliance with all measures implemented to prevent unauthorized disclosure of information.