> Markdown version of [/jobs/ext/3151393-devsecops-engineer-policy-automation-and-evidence-pipelines-for-nato-with-security-clearance](https://www.wearedevelopers.com/jobs/ext/3151393-devsecops-engineer-policy-automation-and-evidence-pipelines-for-nato-with-security-clearance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# DevSecOps Engineer (Policy Automation and Evidence Pipelines) for NATO with security clearance

- **Company:** WLG
- **Location:** Den Haag, Netherlands
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), JIRA, Control Objectives for Information and Related Technology (COBIT), Databases, System Configuration, Identity and Access Management, Interoperability, Inventory Management Software, JSON, Python (Programming Language), OAuth, OpenID, Windows PowerShell, Technical Data Management Systems, Scripting, Kubernetes, Graphql, Api Gateway, Restful APIs, Webhooks, Devsecops, Servicenow
- **Published:** September 2, 2026
- **Apply:** https://www.adzuna.nl/details/5865376167

## About the Role

* A bachelor's degree in a related discipline with three years of related experience
 * Three years across all of: Kubernetes; REST API integration; Python and scripting; CI/CD pipelines
 * Drafting technical data flows
 * Webhooks and the Jira or ServiceNow APIs
 * Microsoft 365 Graph API and Security Center
 * Red-teaming against compliance requirements
 * PowerShell, cloud APIs and JSON
 * OAuth2, OIDC and identity management
 * Documented experience of process analysis and design

Nice to have

 * Real technical knowledge of how allied organisations achieve interoperability
 * A working understanding of defence cloud strategy
 * ITIL, COBIT or an equivalent

## Description

* Preparing the target container platform: deployment, database, API gateway, networking and configuration
 * Configuring and testing identity integration - role mappings, automated onboarding and access control
 * Standing up and validating connectors that pull compliance, telemetry and software-inventory data from the cloud estate
 * Confirming imported control statuses and evidence arrive, normalise and map correctly
 * Running controlled test changes to prove event-driven updates are detected accurately
 * Wiring the workflows so a failed control raises a ticket by itself
 * Running stakeholder review sessions to test the assumptions and the mappings
 * Tracking issues through to remediation