Assignment Description

We are seeking a senior DevOps / Platform Engineering consultant with strong experience in DevSecOps, Terraform, CI/CD, security, and compliance.

The role focuses on maintaining a stable and secure DevOps platform, including CI/CD pipelines and Azure DevOps managed as code using Terraform. The consultant will support the design, implementation, maintenance, and continuous improvement of pipelines and Terraform-based platform code, while enhancing automation for build, test, and deployment processes.

The consultant is responsible for ensuring the platform meets requirements for security, traceability, and compliance. The consultant must be able to independently take over platform operations from the start with minimal handover. The assignment includes ongoing responsibility for stable and secure platform and pipeline operations, as well as a structured handover at the end, including documentation of all changes made.

The role also includes advising on best practices and sharing knowledge related to Azure DevOps, including Library and Artifacts. It requires close collaboration with developers, the ability to provide guidance and knowledge transfer, and the ability to document workflows and best practices in a compliance-driven environment.

Required Qualifications:

• Experience applying security and compliance practices in CI/CD, including secrets management, Key Vault, Workload Identity Federation/OIDC, least-privilege access control, and traceability/auditability throughout deployment processes.
• Experience working with Azure DevOps projects, access rights, branch policies, service connections, and environments.
• Proven, well-documented experience working with Terraform in complex environments.
• Experience handling Azure-based remote state, including migration, import, and restore of state.
• Strong experience creating, implementing, and maintaining CI/CD pipelines in Azure DevOps.
• Experience using the microsoft/azuredevops Terraform provider to manage Azure DevOps as code.
• Experience building and maintaining tailored Terraform modules.
• Experience working with multi-stage YAML pipelines, templates, and variable groups.
• Ability to assess Terraform plans critically and identify changes that may remove or destroy resources.
• Experience working across multiple providers and subscriptions, including azurerm, azuread, and azuredevops.

It is considered advantageous if you have experience with PowerShell and the Azure DevOps REST API for operational automation, including license and user administration. Experience with Entra ID identity management is also advantageous, including service principals, Workload Identity Federation, role assignments, and administrative units. It is further considered beneficial to have in-depth knowledge of Azure DevOps Library, including variable groups, secure files, Key Vault integration, and pipeline/user permissions per environment, as well as knowledge of Azure Artifacts, including feeds, upstream sources, and package/version management. Experience integrating security scanning, such as SAST, SCA, and secret scanning, into pipelines is also advantageous. Knowledge of ISO 27001, NIS2, and GDPR is considered beneficial. Relevant certifications, such as AZ-400 or HashiCorp Terraform Associate, are considered a plus, although documented practical experience carries significantly more weight.

Language requirement: Swedish, Danish, or English

Work arrangement: The assignment is part-time, one day per week, on-site.