DevOps Engineer, Frontend (M/F) - Rabat
Company sector : IT (Information Technology)
COMPANY :
Are you looking for new challenges and want to give your career a new boost? Join Sofrecom, a company where agility, boldness, and teamwork are at the heart of our culture, and where everyone can thrive fully.
A subsidiary of the Orange group, Sofrecom is a consulting and engineering company specializing in telecommunications. We support our clients in their digital transformation by helping them anticipate technological changes, adapt their activities, modernize their organizations, and develop sustainable and high-performing solutions.
With over 3,000 consultants and experts from 34 nationalities and located across 9 sites worldwide, Sofrecom relies on the richness of experiences and talents to drive innovation and aim for excellence.
Our company culture values an inclusive, diverse, and equitable environment, where each person is encouraged to fully develop. We promote the integration of young talents, support the development of experienced employees, and champion professional equality for all. We are also committed to creating conditions conducive to the full participation of people with disabilities. Thus, everyone can develop their skills, contribute actively, and progress in their career, in a supportive, stimulating, and diversity-respecting environment.
Joining Sofrecom means participating in exciting projects, exploring diverse career paths, and evolving in an environment that values your ideas, skills, and ambitions.
Apply now and join a place where everyone can express themselves freely and find their place.
All personal data shared with Sofrecom Services Maroc are processed in accordance with Law No. 09-08 on the protection of personal data. To exercise your rights of access, rectification, or opposition, please contact the HR department at 05 37 27 99 00.
Together, we contribute to the development of digital technology worldwide!
What our employees love most about working here ❤ : Read our verified reviews
Company culture :
Job :
Context
Reporting to the IDH Infra team, you will work in a Huawei Cloud Stack (HCS) private cloud environment, within an ecosystem combining managed services and resources deployed from scratch, including Kubernetes clusters hosting data operators (Spark, Strimzi/Kafka, Airflow...).
The tooling is based on GitLab (code management, GitLab Registry, GitLab CI), Terraform, Ansible, Helm, and Kustomize.
The team provides project teams with a set of infrastructure enablers: ready-to-use cross-functional components (identity, observability, secrets, service exposure...). This position is dedicated to the development and evolution of these enablers: it is a developer role, with a good understanding of the cloud-native execution environment.
Main Missions
1. IAM - Ory (Kratos, Hydra, Keto, Oathkeeper)
Develop evolutions for the IAM component: authentication flows (login, registration, MFA, account recovery), identity federation, and SSO.
Integrate applications via OAuth2 / OpenID Connect (Hydra): manage clients, scopes, consent, tokens.
Model and implement authorization policies (Keto, Zanzibar-type model) and access rules (Oathkeeper).
Develop specific components: self-service UI, login/consent services, hooks and webhooks, connectors to existing directories (LDAP/AD).
Contribute to application maintenance and operations: Ory version upgrades, schema migrations, non-regression tests.
2. Observability
Design and evolve the observability stack: metrics (Prometheus), logs (Loki), traces (Tempo / Jaeger), visualization (Grafana).
Standardize application instrumentation with OpenTelemetry (SDK, collector, conventions).
Develop exporters, dashboards, and alerting rules "as code"; define reusable SLOs/SLIs.
Provide project teams with ready-to-use templates (libraries, Helm charts, dashboard templates).
3. Other infrastructure enablers
Secrets: integrate HashiCorp Vault (Kubernetes auth, secret injection, rotation).
Certificates: Cert-Manager, internal issuers and PKI, lifecycle automation.
Service exposure: Ingress controllers and API Gateway (routing, rate limiting, front-end authentication).
S3-compatible object storage (MinIO): self-service provisioning and access policies.
Develop Kubernetes operators or controllers and internal tools (CLI, API) to expose these components as self-service.
4. Industrialization & Quality
Package enablers with Helm and Kustomize and deliver them via GitLab CI (build, tests, security scan, publication in GitLab Registry).
Write automated tests (unit, integration, end-to-end) and apply code review best practices.
Write technical documentation and user guides for project teams.
Provide occasional support to operations and project teams on the enablers.
Required profile :
Profile Sought
Master's degree (Bac+5) in Computer Science (engineering school or equivalent).
Minimum 4 years of experience in back-end development, including experience with identity, platform, or observability topics.
Product mindset: you design reusable components intended for the teams that consume them.
Technical Skills
Essential
Go (language of the Ory ecosystem and Kubernetes); a second language is a plus (Python, TypeScript/Node.js).
Identity protocols: OAuth2, OpenID Connect, JWT, SAML; understanding of authorization models (RBAC, ReBAC).
Kubernetes from a developer's perspective: deployment, CRD, cloud-native best practices.
Observability: Prometheus, Grafana, OpenTelemetry.
Git / GitLab CI, Docker, Helm.
REST / gRPC API design, databases (PostgreSQL).
Appreciated
Experience with the Ory stack or an equivalent IAM solution (Keycloak...).
Development of Kubernetes operators (Kubebuilder, Operator SDK, controller-runtime).
HashiCorp Vault, Cert-Manager, API Gateway (Kong, APISIX...).
Frontend (React / Next.js) for customizing authentication UIs.
Terraform, Ansible, Kustomize.
Knowledge of Huawei Cloud Stack or another private cloud.
Security awareness: OWASP, DevSecOps.
Personal Qualities
Rigor, code quality, and security awareness.
Autonomy and ability to own a subject from end to end.
Team spirit and good communication with Ops, Data, and project teams.
Ability to document and share knowledge.
Fluent French and English (written and spoken) required.
Find out if this job is right for you
Take the free ReKrute personality test and instantly get your compatibility score with this job and with the culture of more than 150 companies on the market.
