Now hiring

DevSecOps, Automation & Innovation Engineer | IT CIB @ Natixis in Portugal

PTOnsiteFull-timeJob reference REF4257M
Apply with ResuMinder

Opens on the employer's site

About this role

We are seeking an Automation & Innovation Engineer to join the IT Transversal (IT TRV) Innovation & Development team — a forward-looking role driving automation transformation and continuous innovation of CIB's development and deployment ecosystem.

Key Responsibility Areas:

1. Automation Transformation Leadership

Primary: Eliminate manual development and operational toil

Design and implement comprehensive CI/CD pipeline automation across CIBAutomate infrastructure provisioning through Infrastructure-as-Code principles and toolingEstablish GitOps principles for configuration management and deploymentAutomate security validation, compliance checks, and dependency scanningDrive adoption of containerization (Docker) and orchestration (Kubernetes/OpenShift)Create self-healing infrastructure that requires minimal human interventionEliminate manual security reviews through automated security gates2. Innovation Leadership & Technology Prototyping

Primary: Drive continuous innovation in automation practices

Lead innovation lab activities — prototype and validate emerging automation technologies (service mesh, policy-as-code, advanced observability, GitOps tools)Conduct technology watch on DevOps, security automation, and AI4DevOps trendsCreate proof-of-concept implementations for cutting-edge tools/frameworksDe-risk adoption of emerging technologies before enterprise-wide rolloutTransfer innovations and c ompetencies to Development Squad and Business IT teams (IT TRV, IT GMT, IT GBCR)Establish automation excellence center standards and best practicesPresent findings and recommendations to CIB CIO community3. Self-Service Platform Engineering

Primary: Build automation platform enabling team independence

Design and maintain internal platform (CI/CD, IaC, observability, security scanning)Create Platform-as-a-Service (PaaS) abstractions hiding infrastructure complexityEnable developers to deploy code securely without manual security reviewsEstablish platform as reusable asset available to IT Transversal, GMT, and GBCR teamsBuild self-service capabilities (provisioning, deployments, rollbacks)Document and evangelize platform usage through training and community building4. Developer Experience & Productivity Innovation

Primary: Reduce friction and enable developer happiness

Measure "developer toil" — manual, repetitive work slowing down deliveryEnable fast feedback loops — deployment feedback in seconds, not hoursDesign frictionless onboarding — new team members productive in daysBuild tools that feel like "magic" — developers don't need to understand infrastructureConduct regular feedback sessions with development teams to identify pain points5. Velocity Metrics & Continuous Improvement

Primary: Drive measurable improvements in team performance

DORA Metrics Targets:

Metric Target

Deployment frequency Daily or multiple-times-daily

Lead time for changes Reduce from weeks to days/hours

Time-to-recovery (MTTR) Reduce by 50%+

Change failure rate Reduce failed deployments

Automation Coverage Targets:

Area Target

Infrastructure-as-Code coverage 100%

Security validation automation 90%+

Testing automation 95%+

Self-service deployment adoption 90%+

6. AI4DevOps Innovation & Intelligent Automation

Primary: Pioneer AI-driven automation in CIB's DevOps ecosystem

Design and deploy AI agents for infrastructure provisioning, deployment automation, and incident remediationEstablish AI Agent Governance frameworks:Define permission systems and privilege boundaries for AI agentsImplement containment strategies ensuring safe agent operation in productionEstablish audit trails and decision logging for agent actionsImplement AI-driven threat modeling and proactive security:Leverage LLMs for threat modeling and adversary behavior anticipationMove from reactive compliance to proactive security hardeningBuild observability and tracing for AI agents (causal graph tracing, confidence metrics)Design data governance policies for AI agents (prevent data exfiltration, implement redaction)Develop "agent-ready" infrastructure code (idempotent, predictable, safe for AI consumption)Establish hybrid human-AI workflows with clear escalation paths Experience & Education

Bachelor's degree in Computer Science, Engineering, or equivalent experience5+ years in DevOps, Infrastructure Engineering, SRE, or related roles3+ years driving innovation, prototyping technologies, or leading architectural improvementsProven track record of reducing manual toil and improving team velocityFamiliarity with financial services or regulated industries preferredInfrastructure Automation & DevOps

Expert-level Infrastructure-as-Code principles and practices (tool-agnostic)Strong CI/CD expertise: Jenkins, GitLab CI, GitHub ActionsDeep containerization (Docker) and orchestration (Kubernetes, OpenShift)Linux/Unix system administration (RHEL, CentOS, Ubuntu)Git mastery (GitFlow, branching strategies)Cloud platform experience (AWS, Azure, GCP)Security & Compliance Automation

Application security principles (OWASP Top 10)Security scanning automation: SAST/DAST (SonarQube, Checkmarx, ZAP)Container security scanning (Trivy, Aqua)Secrets management (HashiCorp Vault, AWS Secrets Manager)Compliance frameworks (PCI-DSS, GDPR, SOX)Security policy-as-code (OPA, Kyverno)AI & Intelligent Automation (AI4DevOps)

Understanding of AI agents and LLM applications in operationsFamiliarity with prompt engineering and LLM-based toolingConceptual knowledge of agent governance, permission systems, and sandboxingExposure to AI agent frameworks (LangChain, AutoGen)Understanding of hybrid human-AI workflow designMonitoring, Logging & Observability

Prometheus, Grafana, ELK Stack, DatadogCentralized logging (ELK, Splunk, CloudWatch)APM and distributed tracing (Jaeger, DataDog, New Relic)Software Engineering & Architecture

Proficiency in Python, Go, Java, or BashREST APIs, microservices, event-driven systemsSoftware design principles and testing strategiesSoft Skills

Innovation mindset — prototyping, experimentation, "failing fast"Entrepreneurial drive — ownership, bias toward actionCommunication — technical and non-technical stakeholdersCollaboration — across Development, Security, and OperationsTeaching mindset — mentoring teams on automation best practicesContinuous learning — staying current with emerging technologiesPreferred Skills

Open-source contribution or community involvementService mesh experience (Istio, Linkerd)GitOps platform experience (ArgoCD, Flux)Incident response and postmortem facilitationSuccess Metrics & KPIs

DORA Metrics

Deployment frequency: weekly → daily or multiple-times-dailyLead time for changes: weeks → days/hoursMTTR: reduce by 50%+Change failure rate: reduce failed deployments and rollbacksAutomation Coverage

Infrastructure-as-Code: 100% defined in codeSecurity scanning: 90%+ automatedTesting: 95%+ executed automaticallyDeployments: 90%+ via automated pipelinesPlatform Adoption

Developer adoption: 80%+ of CIB developers using self-service platformSelf-service deployments: 80%+ of production deploymentsDeveloper toil reduction: 20%+ in manual tasksDeveloper satisfaction: 80%+ satisfaction scoreInnovation Impact

Technologies prototyped: 2-3 per yearPrototype-to-production rate: 60%+ within 18 monthsRegular innovation updates to CIB CIO communityAI4DevOps Maturity

AI agent governance framework: established and documentedAI-driven infrastructure changes: 30%+Agent success rate: 95%+ reliabilityProactive threat detection via LLM-based modeling Our workplace reflects the vibrant spirit of our locations, with initiatives such as a Green Transportation Budget, electric bikes and a flexible Hybrid Work Policy. We promote wellbeing through the Honolulu Wellness Club, a Prayer Room, a Lactation Room, and themed Villages that inspire creativity and collaboration. Through our ESG and DEI strategies, we are committed to being inclusive, caring, and fair, ensuring every voice is heard and valued.

Skills

Information TechnologyMid-Senior LevelBanking

Ready to apply?

Install the ResuMinder extension and we'll auto-fill the application in seconds — no rewriting.

See how your CV scores