DevOps Security Engineer – OpenShift

apeirum is recruiting on behalf of maxon for a DevOps Security Engineer in Barcelona. This is a permanent position employed directly by maxon; apeirum runs the selection process.

maxon is a global provider of world-class precision drive systems. Its drives are used wherever extreme precision and the highest quality standards matter – on Earth, and on Mars. maxon offers creative minds and passionate doers a global yet trusted environment, where people who question what is possible and challenge themselves can grow.

As DevOps Security Engineer you join maxon's Group Software Development as the full-time security anchor of its on-premise OpenShift platform. You secure how software is built and run – from the first commit to the running container – and keep the platform hardened, compliant and resilient. You work every day with a small platform engineering team at maxon's Swiss headquarters (GitOps, four-eyes reviews, a fixed weekly sync), and in Barcelona you share the office with maxon's Cloud Security Engineer. Several tool decisions are still open: you will shape the security stack rather than inherit it. Hybrid in Barcelona (3 days office, 2 remote), with regular on-site weeks in Switzerland (approx. 5–10 %, more during onboarding).

Tasks

• Build security into the CI/CD pipelines and GitOps deployments to OpenShift: static analysis, dependency and secrets scanning, container image scanning and image integrity checks – running as smoothly as every other quality gate.

• Define the security baseline for the OpenShift clusters (Security Context Constraints, RBAC, network policies, admission control, compliance profiles), implement it as GitOps changes reviewed by the platform engineers, and verify it continuously.

• Support development teams early: threat modeling, security user stories, secure-coding guidance and training.

• Run vulnerability management for the container platform: advisories, registry and runtime scan results, scoping application penetration tests and driving remediation with the teams.

• Turn ISO 27001 requirements and group security policies into automated checks, so audit evidence comes out of the pipeline instead of a spreadsheet.

• Automate the pipeline side of security response – blocking vulnerable releases, triggering rollbacks, feeding findings into the central incident and vulnerability process.

• Document the platform's security runbooks and build up deputy capability for cluster operations together with the platform engineers.

Requirements – must have

• 3+ years of hands-on experience in DevSecOps or container-platform security.

• Experience securing OpenShift or a comparable enterprise Kubernetes distribution in production – or a strong Kubernetes background and the drive to go deep on OpenShift quickly.

• Hands-on experience building security gates into CI/CD pipelines.

• Confident with GitOps, policy as code, container image scanning and secrets management – tool-agnostic, because you know the principles behind the products.

• Scripting in Python, Bash or PowerShell; a solid understanding of the software development lifecycle.

• Knowledge of security frameworks such as OWASP, ISO 27001 or CIS Benchmarks.

• You enjoy coaching developers and turning security topics into practical guidance.

• You work well with colleagues in another location – written, asynchronous and structured – and like spending on-site weeks with the team in Switzerland.

• University degree in computer science or comparable vocational training.

• Fluent English.

• Based in Spain (Barcelona).

Nice to have

• German – a real advantage for working with the Swiss platform team.

• Red Hat certifications (e.g. OpenShift Administration or Security specialisations).

• Software supply-chain security (SBOM, signing, attestation).

• Azure fundamentals.

What maxon offers

• A permanent employment contract directly with maxon, competitive compensation based on your experience, flexible annual working hours and a hybrid model.

• Real ownership: you are the full-time security anchor of the container platform and influence open tool decisions.

• A dynamic and friendly workplace in maxon's Barcelona tech hub, combining startup energy with the stability of a Swiss industrial leader.

• International collaboration with teams in Switzerland and other locations, including regular on-site weeks at the Swiss headquarters.

• Continuous learning and growth through the maxon academy and professional development programs.

• Additional benefits such as Club Natació de Barcelona membership and the Cobee program.

Interested? Apply with your CV. apeirum reviews every application personally and will get back to you; shortlisted candidates then interview with the maxon team, and the offer and contract come from maxon.