Full Stack Engineer / DevSecOps Expert (Permanent)

About the role

We are looking for a DevSecOps Expert who can also work as a Full‑Stack Engineer to design, develop and secure modern applications and APIs for our Luxembourg City office. You will be part of a dynamic team responsible for the full lifecycle of software solutions, from specification to production.

Key responsibilities

• Define technical specifications and carry out detailed analyses.
• Design and implement applications, APIs and middleware that meet functional and security requirements.
• Ensure the security of solutions and overall architecture, applying best practices such as OWASP and SSDLC.
• Participate in the implementation and maintenance of CI/CD pipelines and development standards.
• Develop comprehensive test suites (unit, functional, performance, security, etc.).
• Maintain and evolve existing solutions while guaranteeing stability.
• Support incident management and resolve production issues.

Required profile

• Master’s degree in Computer Science or equivalent professional experience.
• Significant experience with Identity Management (authentication, federation, OIDC, SAML, WebAuthN, FIDO2) and Access Management (authorization, OAuth, API Gateway).
• Strong knowledge of web, mobile and API security, GDPR, PSD2 and related regulations.
• Proven experience in Java J2EE development (Spring Boot, Play) and front‑end development with Angular.

Required skills

• Identity Management (authentication, federation, OIDC, SAML, WebAuthN, FIDO2)
• Access Management (authorization, OAuth, API Gateway)
• Web, mobile and API security, OWASP, SSDLC, GDPR, PSD2
• Java J2EE, Spring Boot, Play Framework
• REST APIs, Angular
• Linux, WSL, Bash scripting
• Docker, Kubernetes, Rancher
• CI/CD tools: Jenkins 2, Rundeck, Nexus, SonarQube, Azure DevOps
• Testing tools: Gatling, Parasoft, Katalon