N

Natixis in Portugal

Banking technology and operations hub

DevSecOps – Automation & Innovation Engineer - IT Cib

Full-TimeUpdated on 10/15/2026
No salary listed
Senior
Bachelor's
Portugal
Hybrid
DevOps & InfrastructurePlatform Engineering, DevOps Engineering

About the job

Requirements
  • Bachelor's degree in Computer Science, Engineering, or equivalent experience.
  • At least 5 years of experience in DevOps, Infrastructure Engineering, Site Reliability Engineering, or related roles.
  • At least 3 years of experience driving innovation, prototyping technologies, or leading architectural improvements.
  • A proven track record of reducing manual toil and improving team velocity.
  • Expert-level Infrastructure-as-Code principles and practices.
  • Strong CI/CD expertise with Jenkins, GitLab CI, or GitHub Actions.
  • Deep containerization experience with Docker and orchestration experience with Kubernetes or OpenShift.
  • Linux/Unix system administration experience with RHEL, CentOS, or Ubuntu.
  • Git mastery, including GitFlow and branching strategies.
  • Cloud platform experience with AWS, Azure, or GCP.
  • Knowledge of application security principles, including OWASP Top 10.
  • Security scanning automation experience with SAST/DAST tools such as SonarQube, Checkmarx, or ZAP.
  • Container security scanning experience with Trivy or Aqua.
  • Secrets management experience with HashiCorp Vault or AWS Secrets Manager.
  • Knowledge of compliance frameworks including PCI-DSS, GDPR, or SOX.
  • Security policy-as-code experience with OPA or Kyverno.
  • Understanding of AI agents and LLM applications in operations.
  • Familiarity with prompt engineering and LLM-based tooling.
  • Conceptual knowledge of agent governance, permission systems, and sandboxing.
  • Exposure to AI agent frameworks such as LangChain or AutoGen.
  • Understanding of hybrid human-AI workflow design.
  • Experience with Prometheus, Grafana, ELK Stack, or Datadog.
  • Centralized logging experience with ELK, Splunk, or CloudWatch.
  • APM and distributed tracing experience with Jaeger, Datadog, or New Relic.
  • Proficiency in Python, Go, Java, or Bash.
  • Knowledge of REST APIs, microservices, and event-driven systems.
  • Knowledge of software design principles and testing strategies.
  • Ability to communicate technical information to technical and non-technical stakeholders.
  • Ability to collaborate across Development, Security, and Operations.
  • Ability to mentor teams on automation best practices and stay current with emerging technologies.
Responsibilities
  • Design and implement comprehensive CI/CD pipeline automation across CIB.
  • Automate infrastructure provisioning using Infrastructure-as-Code principles and tooling.
  • Establish GitOps principles for configuration management and deployment.
  • Automate security validation, compliance checks, and dependency scanning.
  • Drive adoption of containerization using Docker and orchestration using Kubernetes or OpenShift.
  • Create self-healing infrastructure that requires minimal human intervention.
  • Eliminate manual security reviews through automated security gates.
  • Lead innovation lab activities by prototyping and validating emerging automation technologies, including service mesh, policy-as-code, advanced observability, and GitOps tools.
  • Conduct technology watch on DevOps, security automation, and AI4DevOps trends.
  • Create proof-of-concept implementations for emerging tools and frameworks.
  • De-risk adoption of emerging technologies before enterprise-wide rollout.
  • Transfer innovations and competencies to Development Squad and Business IT teams, including IT TRV, IT GMT, and IT GBCR.
  • Establish automation excellence center standards and best practices.
  • Present findings and recommendations to the CIB CIO community.
  • Design and maintain an internal platform for CI/CD, Infrastructure-as-Code, observability, and security scanning.
  • Create Platform-as-a-Service abstractions that hide infrastructure complexity.
  • Enable developers to deploy code securely without manual security reviews.
  • Establish the platform as a reusable asset available to IT Transversal, GMT, and GBCR teams.
  • Build self-service capabilities for provisioning, deployments, and rollbacks.
  • Document and promote platform usage through training and community building.
  • Measure developer toil, including manual and repetitive work that slows delivery.
  • Enable fast feedback loops, with deployment feedback in seconds rather than hours.
  • Design frictionless onboarding so new team members can become productive in days.
  • Build tools that let developers use infrastructure without needing to understand its underlying complexity.
  • Conduct regular feedback sessions with development teams to identify pain points.
  • Design and deploy AI agents for infrastructure provisioning, deployment automation, and incident remediation.
  • Establish AI agent governance frameworks, including permission systems and privilege boundaries, containment strategies for safe production operation, and audit trails and decision logging for agent actions.
  • Implement AI-driven threat modeling and proactive security, leveraging LLMs for threat modeling and adversary behavior anticipation and moving from reactive compliance to proactive security hardening.
  • Build observability and tracing for AI agents, including causal graph tracing and confidence metrics.
  • Design data governance policies for AI agents to prevent data exfiltration and implement redaction.
  • Develop agent-ready infrastructure code that is idempotent, predictable, and safe for AI consumption.
  • Establish hybrid human-AI workflows with clear escalation paths.
  • Drive improvements measured by DORA metrics, automation coverage targets, platform adoption and developer productivity, innovation impact, and AI4DevOps maturity metrics.
Desired Qualifications
  • Familiarity with financial services or regulated industries.
  • Open-source contribution or community involvement.
  • Service mesh experience with Istio or Linkerd.
  • GitOps platform experience with ArgoCD or Flux.
  • Incident response and postmortem facilitation.

About the company

N

Natixis in Portugal

View
Website

Natixis in Portugal is a centre of expertise supporting Groupe BPCE's international banking businesses. Based in Porto, its teams work across information technology, banking operations and compliance for corporate and investment banking, asset management and other group functions. The hub develops digital solutions, processes financial activity and provides specialist support used across the wider organization. It is a Portugal-based delivery and expertise center rather than a standalone retail bank, with a multinational workforce serving internal business lines and global financial operations.

Company Size

N/A

Company Stage

N/A

Total Funding

N/A

Headquarters

N/A

Founded

N/A