Devsecops, Automation

Full-time
Company Description
Natixis in Portugal is a Centre of Expertise whose mission is to transform traditional banking by developing innovative solutions for the business, operations and work culture of Groupe BPCE worldwide.
As part of Groupe BPCE's international division, Natixis in Portugal designs and delivers solutions for its two core areas – Corporate & Investment Banking and Asset & Wealth Management – as well as transversal services that support all entities across the Group.
With more than 3,000 employees representing 46 nationalities, the teams work across Information Technology, Banking Support Activities, and Compliance, in an integrated, inclusive, and cross-functional way, supporting all business lines and platforms of the Group.
A disruptive mindset and a culture of proximity and agility identify Natixis in Portugal Team and reflect the company's mission to transform traditional banking at a global scale: a perfect match in the Portuguese dynamics and entrepreneurial ecosystem.
Job Description
We are seeking an
Automation & Innovation Engineer
to join the IT Transversal (IT TRV) Innovation & Development team — a forward-looking role driving automation transformation and continuous innovation of CIB's development and deployment ecosystem.
Key Responsibility Areas:
Primary: Eliminate manual development and operational toil
Design and implement comprehensive
CI/CD pipeline automation
across CIB
Automate infrastructure provisioning through
Infrastructure-as-Code
principles and tooling
Establish
GitOps principles
for configuration management and deployment
Automate security validation, compliance checks, and dependency scanning
Drive adoption of
containerization
(Docker) and orchestration (Kubernetes/OpenShift)
Create
self-healing infrastructure
that requires minimal human intervention
Eliminate manual security reviews through automated security gates
2. Innovation Leadership & Technology Prototyping
Primary: Drive continuous innovation in automation practices
Lead
innovation lab activities
— prototype and validate emerging automation technologies (service mesh, policy-as-code, advanced observability, GitOps tools)
Conduct
technology watch
on DevOps, security automation, and AI4DevOps trends
Create
proof-of-concept
implementations for cutting-edge tools/frameworks
De-risk adoption of emerging technologies before enterprise-wide rollout
Transfer innovations and c ompetencies to
Development Squad and Business IT teams
(IT TRV, IT GMT, IT GBCR)
Establish
automation excellence center
standards and best practices
Present findings and recommendations to CIB CIO community
Primary: Build automation platform enabling team independence
Design and maintain internal platform (CI/CD, IaC, observability, security scanning)
Create
Platform-as-a-Service (PaaS)
abstractions hiding infrastructure complexity
Enable developers to
deploy code securely without manual security reviews
Establish platform as reusable asset available to IT Transversal, GMT, and GBCR teams
Document and evangelize platform usage through training and community building
4. Developer Experience & Productivity Innovation
Primary: Reduce friction and enable developer happiness
Measure
"developer toil"
— manual, repetitive work slowing down delivery
Enable
fast feedback loops
— deployment feedback in seconds, not hours
Design
frictionless onboarding
— new team members productive in days
Build tools that feel like
"magic"
— developers don't need to understand infrastructure
Conduct regular feedback sessions with development teams to identify pain points
5. Velocity Metrics & Continuous Improvement
Primary: Drive measurable improvements in team performance
DORA Metrics Targets:
Metric Target
Deployment frequency Daily or multiple-times-daily
Lead time for changes Reduce from weeks to days/hours
Time-to-recovery (MTTR) Reduce by 50%+
Automation Coverage Targets:
Area Target
Infrastructure-as-Code coverage 100%
Security validation automation 90%+
Testing automation 95%+
Design and deploy
AI agents
for infrastructure provisioning, deployment automation, and incident remediation
Define permission systems and privilege boundaries for AI agents
Establish audit trails and decision logging for agent actions
Implement
AI-driven threat modeling
and proactive security:
Leverage LLMs for threat modeling and adversary behavior anticipation
Move from reactive compliance to proactive security hardening
Build
observability and tracing
for AI agents (causal graph tracing, confidence metrics)
Design
data governance policies
for AI agents (prevent data exfiltration, imp