DevSecOps Consultant

The DevSecOps Consultant will support the implementation of the e-Comment project by conducting technical assessments, creating and improving automated Azure DevOps pipelines, integrating security scanning, containerizing services, and providing training and documentation. The role involves enhancing deployment reliability and establishing DevSecOps standards within the Radiocommunication Bureau's software development environment.

Responsibilities

• Conduct a technical assessment of current CI/CD pipelines, build processes, tooling, infrastructure automation, and security practices to identify areas of improvement aligned with best practice DevSecOps standards.
• Create or improve automated Azure DevOps pipelines for web and desktop applications, including building, testing, security scanning, dependency analysis, packaging, and deployment across multiple environments.
• Establish pipeline templates and standards for scalable reuse across multiple BR applications.
• Enhance deployment reliability through rollback mechanisms, approvals, and reproducible build practices.
• Integrate automated security scanning (SAST, DAST, SCA, container scanning), vulnerability management, license compliance checks, and secure build practices into all pipelines.
• Containerize appropriate services and design deployment pipelines for cloud platforms (Azure and/or AWS).
• Implement automated workflows for building, packaging, code signing, and distributing desktop applications in a secure, repeatable manner.
• Configure or improve infrastructure-as-code templates, monitoring, logging, and environment provisioning to ensure consistent and reproducible infrastructure.
• Work closely with developers to define requirements, establish DevSecOps standards, and train teams on new tools and processes.
• Produce clear, maintainable documentation covering DevOps workflows, security practices, pipelines, troubleshooting procedures, and operational guidelines.

Requirements

• Advanced university degree in systems engineering, information technology, computer science or a related field OR education from a reputed college of advanced education with a diploma of equivalent standard to that of an advanced university degree in one of the fields above.
• At least five (5) years of experience in the field relevant to the Special Service Agreement (SSA).
• Proven experience designing and automating CI/CD pipelines and deployment processes for web and/or desktop applications, primarily in Windows environments using Azure DevOps.
• Demonstrated hands on experience with containerization and deploying applications to cloud environments, preferably Azure and/or AWS.
• Experience applying DevSecOps practices such as automated testing, code quality checks, and security scanning within CI/CD workflows.
• Hands-on experience automating desktop application build pipelines, including packaging, versioning, and code-signing of Windows executables in a CI/CD context.
• Experience with Infrastructure as Code and configuration management tools (e.g., Terraform) is desirable.
• Prior involvement in modernizing legacy build or deployment processes and transitioning them into modern automated CI/CD workflows is desirable.
• Experience with AKS, Azure Container Apps, or equivalent orchestration platforms is desirable.
• Knowledge of English or French at advanced level.

Skills

• Systems Engineering
• Information Technology
• Computer Science
• CI/CD Pipelines
• Azure DevOps
• Containerization Technologies
• Cloud Deployment
• Azure Cloud Infrastructure
• AWS cloud platform
• DevOps Practices
• Automated Testing
• Code Quality Checks
• Security Scanning
• Desktop Application Build Automation
• Windows Executable Packaging
• Code Signing
• Infrastructure as Code
• Terraform
• Legacy Build Modernization
• AKS
• Azure Container Apps

Languages

English, French