DevSecOps Engineer - Cloud Security (H/F) | Casablanca (Morocco)

Ce que nos collaborateurs aiment le plus chez nous ❤ : Pour consulter leurs avis certifiés

Sofrecom Maroc stands out for its strongly collaborative culture, where people, trust and employee well-being are central priorities. A close management approach promotes support, accountability and long-lasting teamwork. This collaborative foundation is complemented by a notable innovation dimension, encouraging initiative, agility and experimentation. Structured processes ensure reliability and operational efficiency, while performance-driven practices play a more supportive and balanced role.

Mission Context:
You will join a multidisciplinary team working in agile mode. Your main mission will be to strengthen the Cloud services security domain (COSMOS Security) by contributing to the design, development, automation, and operation of cross-functional security solutions.
You will work in an innovative technical environment, mostly Open Source, and collaborate closely with many internal stakeholders to ensure the availability of secure, high-performance, and reliable services.
Main Missions
Your role will revolve around the strategic THINK, BUILD, and RUN axes, with an intervention scope covering several key projects.
1. Design and implementation of security services (BUILD)
Participate in the construction and evolution of a WAF (Web Application Firewall) service based on the F5 NAP solution, from its architecture to its deployment.
Contribute to the enrichment of an internal security tool that aggregates vulnerability detection, compliance control (CIS), and robustness analysis functionalities (e.g., Vulso, John the Ripper).
Define and implement the architecture of these services in a containerized (Docker) and orchestrated (Kubernetes) environment.
2. Support and assistance (BUILD & RUN)
Assist client teams in integrating the WAF service: help investigate blocks, configure rules, and build expertise.
Provide technical support to development teams for the continuous integration (CI/CD) of their applications on our platforms.
3. Studies and technological watch (THINK)
Conduct technical studies to evaluate and integrate new solutions related to the domain's security strategy.
Ensure studies are reproducible through rigorous documentation and effectively communicate results.
4. Automation and continuous integration (BUILD)
Develop and maintain continuous integration and deployment pipelines (GitLab-CI) for security services.
Write associated integration and operational procedures.
5. Maintenance in Operational Conditions and continuous improvement (RUN)
Handle Level 2 and 3 incidents and provide your expertise for their resolution.
Monitor the performance, availability, and user experience of services.
Manage platform capacity monitoring and optimize resources.
Participate in team rotations to ensure service continuity (ticket management, communication, on-call duty).