DevSecOps Expert

About the role

VASS, in partnership with the European Commission, is looking for a DevSecOps Expert to join the Commission’s team in Brussels. You will design, automate and secure end‑to‑end data pipelines and cloud infrastructure within the Microsoft Fabric ecosystem.

Key responsibilities

• Build and manage CI/CD pipelines using Azure DevOps or GitHub Actions for Fabric workspaces, notebooks and semantic models.
• Configure private network connectivity (Private Endpoints, VNET injection) to keep Fabric traffic off the public internet.
• Integrate automated security scanning (SAST/SCA) and secret management into data workflows.
• Deploy and manage API gateways and reverse proxies for data API access, including traffic filtering and load balancing.
• Provision Fabric capacities and network security (Private Links, VNET injection) with Bicep, Terraform or ARM templates.
• Set up real‑time observability with Azure Monitor and Log Analytics for health, cost and security monitoring.
• Implement granular access controls using Microsoft Entra ID and Fabric‑specific RBAC, and audit them regularly.

Required profile

• Strong understanding of Git‑based version control, branching strategies and release management.
• Knowledge of the Medallion Architecture (Bronze/Silver/Gold) and data promotion across environments.
• Proficiency in PowerShell, Python and SQL for automation and security auditing.
• Solid grasp of DNS, firewall rules and Network Security Groups.
• Deep knowledge of OAuth 2.0, OpenID Connect and SAML authentication protocols.
• Ability to collaborate with data architects and compliance teams to translate security requirements into technical guardrails.
• Good written and spoken English; French is a plus.

Required skills

• Azure DevOps or GitHub Actions
• Azure Monitor, Log Analytics
• Microsoft Entra ID (Azure AD)
• Azure Policy as code
• Bicep, Terraform, ARM templates
• PowerShell, Python, SQL
• DNS, firewall, Network Security Groups (NSG)
• OAuth 2.0, OpenID Connect, SAML
• Microsoft Fabric ecosystem – OneLake, Lakehouses, Warehouses, Data Factory