DevSecOps Engineer - Cloud Security (H/F) - Casablanca
Company sector : IT (Information Technology)
COMPANY :
Are you looking for new challenges and want to give your career a new boost? Join Sofrecom, a company where agility, boldness, and teamwork are at the heart of our culture, and where everyone can thrive fully.
A subsidiary of the Orange group, Sofrecom is a consulting and engineering company specializing in telecommunications. We support our clients in their digital transformation by helping them anticipate technological changes, adapt their activities, modernize their organizations, and develop sustainable and efficient solutions.
With over 3,000 consultants and experts from 34 nationalities and located in 9 offices worldwide, Sofrecom relies on the richness of backgrounds and talents to drive innovation and aim for excellence.
Our company culture values an inclusive, diverse, and equitable environment where everyone is encouraged to thrive. We promote the integration of young talents, support the development of experienced employees, and foster professional equality for all. We are also committed to creating conditions conducive to the full participation of people with disabilities. Thus, everyone can develop their skills, contribute actively, and advance in their career within a supportive, stimulating, and diversity-respecting environment.
Joining Sofrecom means participating in exciting projects, exploring diverse career paths, and evolving in an environment that values your ideas, skills, and ambitions.
Apply now and join a place where everyone can express themselves freely and find their place.
All personal data shared with Sofrecom Services Maroc are processed in accordance with Law No. 09-08 on the protection of personal data. To exercise your rights of access, rectification, or opposition, please contact the HR department at 05 37 27 99 00.
Together, we contribute to the development of digital technology worldwide!
What our employees love most about working here ❤ : Read our verified reviews
Company culture :
Job :
Mission Context:
You will join a multidisciplinary team working in agile mode. Your main mission will be to strengthen the Cloud services security domain (COSMOS Security) by contributing to the design, development, automation, and operation of cross-functional security solutions.
You will work in an innovative technical environment, mostly Open Source, and collaborate closely with many internal stakeholders to ensure the availability of secure, high-performance, and reliable services.
Main Missions
Your role will revolve around the strategic THINK, BUILD, and RUN axes, with an intervention scope covering several key projects.
1. Design and implementation of security services (BUILD)
Participate in the construction and evolution of a WAF (Web Application Firewall) service based on the F5 NAP solution, from its architecture to its deployment.
Contribute to the enrichment of an internal security tool that aggregates vulnerability detection, compliance control (CIS), and robustness analysis functionalities (e.g., Vulso, John the Ripper).
Define and implement the architecture of these services in a containerized (Docker) and orchestrated (Kubernetes) environment.
2. Support and assistance (BUILD & RUN)
Assist client teams in integrating the WAF service: help investigate blocks, configure rules, and build expertise.
Provide technical support to development teams for the continuous integration (CI/CD) of their applications on our platforms.
3. Studies and technological watch (THINK)
Conduct technical studies to evaluate and integrate new solutions related to the domain's security strategy.
Ensure studies are reproducible through rigorous documentation and effectively communicate results.
4. Automation and continuous integration (BUILD)
Develop and maintain continuous integration and deployment pipelines (GitLab-CI) for security services.
Write associated integration and operational procedures.
5. Maintenance in Operational Conditions and continuous improvement (RUN)
Handle Level 2 and 3 incidents and provide your expertise for their resolution.
Monitor the performance, availability, and user experience of services.
Manage platform capacity monitoring and optimize resources.
Participate in team rotations to ensure service continuity (ticket management, communication, on-call duty).
Required profile :
Essential technical skills:
DevOps: Ansible, GitLab-CI, Docker, Kubernetes (K8S)
Security: IS Security, WAF (F5 NAP), vulnerability management, hardening
Development: Python, Go, Shell
Desirable technical skills:
Cloud: OpenStack
Personal qualities:
Autonomy and proactivity in task management.
Rigor and attention to detail, especially in documentation and procedures.
Excellent communication and teamwork skills.
Strong analytical skills and ability to solve complex problems.
Find out if this job is right for you
Take the free ReKrute personality test and instantly get your compatibility score with this job and with the culture of more than 150 companies on the market.
