Technical Architect-azure Devops_3470

Job Title: DevSecOps Engineer

Location: Ireland (Allianz Technology)

Department: DevOps / Platform Engineering

Reports To: Devops Lead

Position Overview

AZT Ireland is seeking a hands-on DevSecOps Engineer to embed security throughout our Azure-based SDLC, working within our existing DevOps toolchain and infrastructure. The role combines the platform and automation depth of our DevOps engineering practice with the security methodology defined by AZT's DPE Security function — Threat Modelling, SCA, SAST, DAST, IAST, CSPM and RASP.

This is a delivery-focused role. The immediate priority is standing up and operationalising Dynamic Application Security Testing (DAST) across our pipelines and environments, in parallel with ongoing responsibility for CI/CD, infrastructure automation and container platform support. The ideal candidate is equally comfortable scripting an Azure pipeline, tuning a Kubernetes deployment, and configuring a security scanning tool against a running application.

Key Responsibilities

1. DevSecOps Tooling & Pipeline Security — priority: DAST

• Lead the rollout of Dynamic Application Security Testing (DAST): select/configure tooling, integrate scanning into CI/CD, and establish scan cadence (manual, scheduled, and build-triggered).
• Design DAST test coverage for AuthN/AuthZ flaws, session-management vulnerabilities, configuration issues and insecure workflows across web, API and microservice applications.
• Own reporting and remediation workflows for DAST findings, working with development teams to prioritise and close out vulnerabilities.
• Support and extend the wider DevSecOps pipeline: Threat Modelling / security architecture review, Software Configuration Analysis (SCA) and Static Application Security Testing (SAST) at build time.
• Evaluate and pilot Interactive Application Security Testing (IAST) where suited to the application stack in use.
• Contribute to Cloud Security Posture Management (CSPM) — monitoring Azure configuration, compliance and vulnerabilities — and to Runtime Application Self-Protection (RASP) for production workloads.
• Act as a shared-responsibility partner alongside Development, Security and Operations: automate security checks in the pipeline, harden deployment configurations, and keep systems patched and up to date.

2. GitHub Enterprise & CI/CD

• Administer and optimise GitHub Enterprise (or Azure DevOps) to support development teams; build and maintain CI/CD pipelines (GitHub Actions / YAML pipelines) for build, test, security-scan and release stages.
• Manage build agents (Linux and Windows), Git repositories, branching strategies (GitFlow / trunk-based) and Personal Access Token (PAT) governance.
• Lead migration of source repositories from GitLab, Bitbucket, SVN and other platforms into GitHub Enterprise, ensuring data integrity, security and minimal downtime.
• Implement security best practice within the GitHub Enterprise ecosystem (branch protection, secret scanning, access control).

3. Cloud Infrastructure (Azure)

• Operate and improve Azure infrastructure: VMs/VMSS, Azure Kubernetes Service (AKS), Application Service Environment (ASE), Azure SQL Database, Cosmos DB, Storage (Blob/File), Data Factory.
• Manage networking and security controls: VNETs, NSGs, Private Endpoints/Private Link, Application Gateway and WAF, Key Vault.
• Build and maintain Infrastructure as Code using Crossplane, Terraform or ARM templates; use Packer for image creation and Ansible for configuration management.

4. Containers & Microservices

• Manage AKS clusters, pod deployment and scaling, Helm charts, Istio service mesh, Flannel networking and ingress controllers.
• Support containerisation practices (Docker) and container registries (Harbor, Amazon ECR, Azure ACR).
• Automate deployment using Argo CD and integrate deployment automation with the broader CI/CD toolchain.

5. SDLC Toolchain & Binary Management

• Manage binary repositories (Nexus) and support migration from legacy tools (e.g. Artifactory) as part of platform modernisation.
• Work across the full SDLC toolchain cluster: build/package management, container registries, deployment automation and monitoring.

6. Scripting & Automation

• Develop automation using Bash/Shell, PowerShell and Python (preferred) across Azure CLI, Azure PowerShell and REST APIs.
• Build scripts and tooling to automate security checks, infrastructure changes and repetitive operational processes.

7. Databases

• Support Azure SQL administration, performance tuning, backup/restore and on-premises-to-Azure migration.
• Support NoSQL platforms — MongoDB (PaaS and VM-hosted) and Azure Cosmos DB.

8. Monitoring & Observability

• Maintain dashboards and alerting in Dynatrace (primary platform), Grafana, Kibana (ELK), Azure Monitor/Log Analytics and Application Insights.
• Support incident management, log analysis, troubleshooting and performance monitoring across environments.

9. Collaboration

• Work in agile teams using Jira for issue tracking and Confluence for documentation; contribute to agile ceremonies and continuous improvement.
• Partner with development, operations and security teams to understand needs, provide solutions, and troubleshoot toolchain issues.
• Provide training and support on best practice within GitHub Enterprise and the wider DevSecOps toolchain.

DevSecOps Methodology — Practices Covered by This Role

The table below reflects AZT's DevSecOps approach: security integrated continuously across the SDLC rather than concentrated at the end. DAST is the current priority delivery focus.

Qualifications

Required

• Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent hands-on experience).
• Proven DevOps/DevSecOps experience with a strong focus on the GitHub Enterprise ecosystem and CI/CD pipeline creation (GitHub Actions).
• Hands-on experience with Azure infrastructure services listed above, and with Infrastructure as Code (Terraform, ARM, or Crossplane).
• Practical experience with at least one application security testing practice (SAST, DAST or IAST); willingness and ability to lead DAST implementation specifically.
• Experience with Kubernetes (AKS), Helm and container registries (Nexus, Harbor, ECR or ACR).
• Strong scripting ability (Python preferred; Bash/PowerShell) and comfort with Azure CLI/REST APIs.
• Experience with monitoring tools such as Dynatrace, Grafana or the ELK stack.
• Experience working in agile teams using Jira and Confluence.
• Strong communication and cross-team collaboration skills, and sound understanding of security best practice and compliance standards.

Preferred

• Certifications in DevOps and/or security-related fields.
• Prior involvement in a DAST or broader application-security-testing rollout.
• Experience with Azure Cosmos DB, MongoDB, and cloud-to-cloud or on-prem-to-cloud database migrations.
• Experience with repository migration (GitLab, Bitbucket, SVN → GitHub Enterprise).
• Familiarity with Cloud Security Posture Management (CSPM) and Runtime Application Self-Protection (RASP) tooling.
  
  

  Good to have :

  •  Having a basic understanding or exposure to AI tools would be a plus.
  • Familiarity with basic AI tools is considered an advantage.
  • Basic knowledge or experience with AI tools will be beneficial.
  • Exposure to AI tools, even at a basic level, is a value-add.A fundamental grasp of AI tools will be an added benefit.

  Your benefits:We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroadWe believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location)From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fosteredFlexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach

  What We Offer

  About Allianz Technology

  With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked with running, optimizing, transforming, and innovating the infrastructure, applications, and services together with Allianz companies to co-create the best customer experience. We service the entire spectrum of digitalization – from one of the industry's largest IT infrastructure projects that spans data centres, networks, and security, to application platforms ranging from workplace services to digital interaction. In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.

  Find us at:

  www.linkedin.com/company/allianz-technology 

  Commitment to Integrity, Fairness & Inclusion

  Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. Ultimately, our greatest strength as a company lies in the unique skills, experiences, and backgrounds our employees contribute.

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us. 

At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust. 

We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. 

Join us. Let's care for tomorrow.