Cavendish Professionals
Software & DevOps Engineer
This engineer designs, builds, and secures enterprise cloud-native backend services in Go and Java, while owning software supply chain security (SBOM, artifact integrity) and embedding DevSecOps practices in CI/CD pipelines with SAST, dependency, and container scanning, plus IaC and threat modeling.
- Compensation
- Not disclosed
- Location
- Warszawa, Poland
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Devops
- Posted
Skills
Must have
- 5+ years of commercial software engineering experience delivering scalable enterprise applications
- Dual proficiency in Go (Golang) and Java across microservices, REST APIs, and distributed systems
- Hands-on expertise in DevSecOps practices and end-to-end CI/CD automation (GitHub Actions, GitLab CI/CD, Jenkins)
- Consultant mindset: lead security enhancements, collaborate with cybersecurity squads, guide teams through architectural changes
- Strong ownership, analytical problem-solving skills, and commitment to secure coding standards
- Strong core programming skills in Go (Golang) and Java
- In-depth architectural understanding of distributed systems, cloud-native environments, and design patterns
- Extensive commercial experience with CI/CD automation and pipeline security testing
- Practical knowledge of Secure Development Lifecycle (SDL), threat modeling, and supply chain security (SBOM, artifact signing)
- Fluent English communication skills for daily international collaboration
Full description
Software & DevOps Engineer | Go & Java | Software Supply Chain Security & DevSecOps
Our client, an in-house technology consultancy of a global consulting firm, is looking for an experienced Software & DevOps Engineer to design, build, and secure enterprise-level cloud platforms. In this role, you will take direct technical ownership of enhancing software supply chain security and embedding secure development lifecycle (SDL) practices across distributed systems and modern CI/CD automation pipelines.
What You’ll Be Doing:
- Designing, building, and maintaining enterprise-grade, cloud-native backend applications and services using Go (Golang) and Java.
- Leading code reviews, establishing technical strategy, and evaluating/integrating open-source components into production systems.
- Taking ownership of software supply chain security by implementing SBOM adoption, dependency governance, and artifact integrity controls.
- Designing and optimizing automated CI/CD pipelines with integrated security scanning (SAST, dependency analysis, container scanning).
- Embedding Infrastructure-as-Code (IaC) best practices and continuous automated testing into daily deployment workflows.
- Driving Secure Development Lifecycle (SDL) practices, conducting threat modeling, and collaborating on security design reviews.
What We’re Looking For:
- 5+ years of commercial software engineering experience delivering scalable enterprise applications.
- Proven dual proficiency in Go (Golang) and Java across microservices, REST APIs, and distributed systems.
- Hands-on expertise in DevSecOps practices and end-to-end CI/CD automation (GitHub Actions, GitLab CI/CD, Jenkins).
- Consultant mindset: ability to lead security enhancements, collaborate effectively with cybersecurity squads, and guide engineering teams through architectural changes.
- Strong ownership, analytical problem-solving skills, and a commitment to secure coding standards.
Must-Haves:
- Strong core programming skills in Go (Golang) and Java.
- In-depth architectural understanding of distributed systems, cloud-native environments, and design patterns.
- Extensive commercial experience with CI/CD automation and pipeline security testing.
- Practical knowledge of Secure Development Lifecycle (SDL), threat modeling, and supply chain security (SBOM, artifact signing).
- Fluent English communication skills for daily international collaboration.