Jobs in Portugal, in English.

DevOps - CI/CD Specialist (Porto)

Hybrid in Porto·Added yesterday (last checked 22 Oct)

Noesis

106 open roles

Apply

Our summary

Work mode: Hybrid, Porto

Skills

This job advert was originally written in Portuguese.

Requirements

What we're looking for

Solid experience in the administration and use of GitHub Enterprise and GitHub Actions, including rulesets, branch protection, CODEOWNERS, environments, GitHub Apps, and secure management of tokens and permissions.
Practical knowledge of GitHub security features, including secret scanning, push protection, Dependabot, and code scanning, according to the features available in the environment
Experience with Jenkins, specifically declarative pipelines, shared libraries, and CI/CD platform maintenance.
Solid knowledge of Linux, troubleshooting, and shell scripting
Experience with Docker, including multi-stage Dockerfiles, image publishing and management in registries, and security best practices
Knowledge of .NET and Node.js application build and packaging, including dotnet CLI, NuGet, npm, and lockfile management
Knowledge of Kubernetes and Helm from the perspective of application delivery and operation, including charts, environment-based configuration, probes, requests/limits, and deployment troubleshooting
Experience integrating DevSecOps controls into pipelines, specifically vulnerability analysis, SBOM generation, image/artifact signing, secret detection, and static code analysis
Knowledge of Semantic Versioning (SemVer), Conventional Commits, and branching and release management strategies
Knowledge of Grafana and engineering metrics, specifically DORA.

The role

What you'll do

Administer and evolve the GitHub Enterprise platform regarding CI/CD, including organizations, rulesets, branch protection, custom properties, environments, GitHub Apps, permission management, and security features
Develop, maintain, and promote the reuse of workflows and pipeline templates in GitHub Actions
Maintain and evolve existing Jenkins pipelines, including declarative pipelines and shared libraries
Integrate DevSecOps controls into pipelines, including vulnerability analysis with Trivy, SBOM generation with Syft, artifact and image signing with cosign, secret detection with Gitleaks, quality and security analysis with SonarQube, and Dockerfile validation
Maintain and evolve the collection, analysis, and visualization of engineering metrics through DevLake and Grafana dashboards, including DORA metrics and Tech Score
Support .NET and Node.js development teams in build, packaging, container image creation, and application delivery processes in Kubernetes, using Docker, Helm, and GitOps with Argo CD, according to defined architecture standards
Ensure the maintenance and troubleshooting of GitHub Actions self-hosted runners and Linux build agents, guaranteeing the reliability and security of CI/CD processes
Automate operational and integration tasks through Bash, PowerShell, Python, and GitHub REST / GraphQL API or gh CLI
Define and promote best practices for versioning, release management, security, and pipeline reuse
Produce technical documentation, guides, and runbooks, contributing to team autonomy and the continuous improvement of delivery processes.

Main Tasks and Responsibilities

Work arrangement: hybrid ( 2x per week in the office )

If you meet these conditions and would like to join an innovative organization that continuously invests in the training of its talents, send us your application.

Join us. Let's innovate together!

All our recruitment and selection processes are based on equal opportunity, valuing the competence and potential of each person and ensuring that no candidate is discriminated against based on gender, ethnicity, sexual orientation, age, religion, or physical condition.