DevSecOps & Platform Engineer - Liege - ASAP Start - Energy Sector - Freelacne / CDI

We are looking for a senior DevSecOps & Platform Engineering Consultant to support the modernization, security, and cost‑efficiency of cloud and platform environments. This role is critical in enabling development teams through secure, scalable, and well‑governed platforms, while ensuring operational excellence and financial control.

You will act as a key enabler between development, security, architecture, and infrastructure, helping organizations adopt modern DevSecOps practices and internal developer platforms (IDP) that improve productivity, resilience, and security across the full software lifecycle

Key Responsibilities

DevSecOps & Platform Engineering

• Design, implement, and continuously improve DevSecOps practices integrated into CI/CD pipelines
• Embed security controls throughout the development lifecycle (shift‑left security)
• Secure code, manage identities and access, analyze vulnerabilities, and ensure regulatory compliance
• Design and operate Internal Developer Platforms (IDP) to simplify developer workflows and reduce cognitive load

CI/CD & Container Platforms

• Design and maintain robust CI/CD pipelines for automated, reliable deployments
• Work with containerized environments using Docker and Kubernetes
• Improve software quality, delivery speed, and operational stability through automation

Cloud Engineering & Cost Optimization

• Architect and operate cloud infrastructures with a strong focus on performance, security, and scalability
• Apply FinOps principles to optimize cloud costs while maintaining service quality
• Balance technical requirements with financial constraints to deliver sustainable solutions

Infrastructure as Code (IaC) & Automation

• Automate infrastructure provisioning using Terraform, Ansible, or CloudFormation
• Ensure consistent, repeatable, and scalable environments across cloud accounts
• Implement policy‑as‑code and governance mechanisms

Team Enablement & Knowledge Transfer

• Coach development teams on DevSecOps best practices and cloud‑native approaches
• Support the adoption of IaC, security standards, and platform tooling
• Produce high‑quality documentation and promote knowledge sharing
  
  

Required Technical Skills

Cloud & DevSecOps

• AWS DevOps Engineer – Professional certification (required)
• AWS Solutions Architect – Associate (Professional is a plus)
• Strong experience with multi‑account AWS environments (Organizations, Control Tower, SCP, RAM, IPAM)
• Cloud‑native security services: IAM, KMS, CloudTrail, Config, Security Hub, GuardDuty, WAF

Networking & Security

• Strong networking fundamentals: routing, BGP concepts, DNS, CIDR, NAT, VPN
• Experience with AWS Transit Gateway and Direct Connect
• Deep understanding of authentication and authorization mechanisms:
  
  IAM, PAM, CIAM, RBAC, ABAC, SAML, OIDC, identity federation

Tooling & Platforms

• Advanced Terraform usage (modules, state management, policy‑as‑code)
• Azure DevOps Pipelines (multi‑stage pipelines, approvals, artifacts)
• Experience with HashiCorp Vault
• Observability and monitoring: CloudWatch, OpenSearch, dashboards
• FinOps practices: tagging strategies, cost reporting

Documentation & Governance

• Strong documentation skills: HLD, LLD, runbooks, ADRs, architecture diagrams
• High level of rigor in Git usage and version control
• Awareness of regulatory and security frameworks such as NIS2 and IEC 62443

Professional Experience

You have demonstrated experience in:

• Cloud cost optimization while maintaining high availability and performance
• Cloud migrations of complex applications and CI/CD pipelines
• Automation of development processes, including security controls and dependency management
• Coaching and enablement of development teams in DevSecOps and cloud best practices

Soft Skills

• Strong documentation mindset and ability to transfer knowledge clearly
• Excellent collaboration with IT/OT architects, network engineers, and security teams
• High level of autonomy, proactivity, and rigor
• Results‑oriented mindset combining security, performance, and cost control

Languages

• Fluent in English and French
  
  

For non‑EU candidates

• Must hold a valid work permit for Belgium
• Must have a residence permit confirming right of residence