Azure DevSecOps Engineer

About the role

A partner of Nuevo Softwarehouse, a German-based IT consulting and software development firm, is looking for an experienced Azure DevSecOps Engineer / Architect to join its projects. The role focuses on securing a Cloud Provisioning Platform / Self-Service Portal and the underlying DevOps and cloud infrastructure after a penetration test found vulnerabilities that could let privileged or compromised developer accounts access central Azure, Harness, OpenShift, GitHub and Artifactory resources.

Key responsibilities

• Analyze and remediate critical security findings in an Azure / DevSecOps environment
• Harden CI/CD pipelines and Harness configurations
• Review and redesign roles, access and authorization concepts
• Reduce overprivileged service accounts, service principals and user groups
• Secure secrets, tokens and credentials at account, organization and project level
• Harden the integration between the Cloud Provisioning Platform, Harness, GitHub, Artifactory and Azure
• Prevent uncontrolled or manipulated code execution in pipelines and improve code review, approval and governance
• Harden Harness Delegates and restrict cross-environment access; reduce privileges in OpenShift / Kubernetes
• Adjust service accounts, ClusterRoles and namespace permissions; harden Azure Service Principals and Workload Identities
• Review Conditional Access, network security and access restrictions
• Prevent privilege escalation, secret exfiltration and lateral movement
• Design secure architectures and guardrails, document remediation measures and support implementation until findings are resolved

Required profile

• Strong experience as an Azure DevSecOps Engineer or Cloud Security Architect
• Deep knowledge of Microsoft Azure Security and IAM
• Hands-on experience with Azure Service Principals, Workload Identities, RBAC and Conditional Access
• Strong CI/CD security and pipeline hardening experience
• Practical experience with Harness or comparable enterprise CI/CD platforms
• Experience securing cloud provisioning or self-service platforms and remediating penetration test findings
• English at C2 level, mandatory; comfortable in a fully English-speaking international environment

Required skills

• Microsoft Azure, Kubernetes / OpenShift security
• Service accounts, ClusterRoles, RBAC, namespace isolation, secrets management
• GitHub and Artifactory authorization models
• Privilege escalation, lateral movement and post-compromise scenarios
• Relevant experience: Harness delegates, Azure subscription and tenant security, CI/CD pipeline governance, secure software supply chain, zero trust and least privilege