Trouvez votre prochaine offre d’emploi ou de mission freelance CVS (Concurrent Versions System)

Server Tooling and Orchestration Specialist - Remote - Outside IR35 Must have or be eligible to obtain SC Clearance The role combines hands-on SCORCH runbook development and troubleshooting with PowerShell automation and integrations across ServiceNow, SCOM, Active Directory and Microsoft Entra ID. This position is suited to an experienced SCORCH specialist who understands enterprise automation and is comfortable taking ownership of critical production services within an ITIL-aligned environment. Server Tooling and Orchestration Specialist Responsibilities Administer, support and maintain Microsoft System Center Orchestrator (SCORCH) environments. Maintain the availability, health, performance and resilience of production and non-production SCORCH platforms. Design, maintain, test, deploy and optimise SCORCH runbooks. Develop and support PowerShell-based automation workflows for request fulfilment and operational automation. Diagnose failed automations, integration failures and workflow errors. Manage integrations between SCORCH, ServiceNow, SCOM, Active Directory, Azure AD / Entra ID, Exchange Online and Microsoft Teams. Support ServiceNow ITSM workflows, automated ticket creation, request fulfilment and REST API integrations. Support SCOM alert processing, event management and monitoring integrations. Plan and deliver patching, upgrades, releases, capacity management and platform lifecycle activities. Investigate incidents and problems affecting automation services and contribute to root cause analysis. Support service restoration and major incidents involving automation, monitoring or integration services. Produce and maintain operational documentation, runbook guidance, knowledge articles and support procedures. Deliver changes in line with ITIL processes, security controls, SLAs and agreed change windows. Server Tooling and Orchestration Specialist Skills and Experience Strong hands-on Microsoft System Center Orchestrator (SCORCH) experience is essential. Proven experience supporting, troubleshooting and maintaining SCORCH runbooks and automation services. Experience designing, testing and deploying Orchestrator runbooks within enterprise environments. Advanced PowerShell scripting and automation experience. Desirable Experience of ServiceNow Integration experience Experience with Kelverion Integration Packs would be advantageous. Experience with SQL Always On Availability Groups, Hyper-V Replica or highly available SCORCH architectures would be beneficial. VMware PowerCLI, virtualisation, hybrid Data Centre or wider infrastructure automation experience would be advantageous. Experience supporting secure, regulated or highly governed environments would be beneficial. Flexibility to support out-of-hours activities where required. To apply, please send your CV by pressing the apply button. Due to high volume of applications, only shortlisted CVs will be contacted. Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take a minimum 10 weeks. LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance. An award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over multiple years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience. Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.

Nous recherchons un Ingénieur DevSecOps spécialisé en gestion des vulnérabilités pour rejoindre un environnement international exigeant, fortement orienté sécurité, automatisation et gouvernance. Objectif : Il s'agit de renforcer la gestion des vulnérabilités sur le périmètre Business Applications, d'industrialiser les pratiques DevSecOps et d'assurer une traçabilité complète, dans un environnement international et réglementé. Le poste implique de travailler avec les équipes Dev, Infra, Sécurité, Architecture et Claranet. Remédiation des vulnérabilités middleware (~80 %) · Tenir l'inventaire des composants middleware et de leurs versions : runtimes Java et .NET, serveurs web, images de base de conteneurs, Node.js, Amazon Corretto… · Traiter les résultats des scanners Qualys et MDASH : dédoublonnage, qualification, analyse de l'exploitabilité réelle, puis priorisation selon le CVSS, l'EPSS, le catalogue KEV et l'exposition de l'actif. · Corriger : montées de version, correctifs de configuration, durcissement, reconstruction et rebasage des images de conteneurs. · Superviser les tests des correctifs hors production avec les PO et les BRM (Business Relationship Managers), définir les plans de retour arrière et coordonner les mises en production via le Change Management. · Anticiper les fins de vie et de support : plans de migration, suivi des échéances, demandes d'exception temporaire documentées. · Industrialiser avec l'IaC, les pipelines, Ansible et Terraform, et automatiser la mise à jour des images de base. · Coordonner la remédiation avec Claranet et les équipes Sécurité. Supervision de la remédiation applicative (~20 %) · Administrer et améliorer la chaîne d'analyse de code dans les pipelines : SAST, SCA/dépendances, détection de secrets, scan IaC, DAST. · Définir et faire appliquer des quality gates et security gates, avec des politiques de blocage par sévérité et par ligne métier. · Qualifier les alertes, éliminer les faux positifs et instruire les dérogations (durée, justification, validation). · Piloter la correction par les équipes de dev : affectation, suivi des SLA par sévérité, relances, escalades et revues périodiques par application et par squad. · Produire des tableaux de bord et des synthèses pour le management : backlog, âge moyen des vulnérabilités, respect des SLA, tendances mensuelles. · Présenter les tendances en réunion avec les devs, les PO et la sécurité. · Accompagner et former les développeurs : guides de code sécurisé, patterns récurrents, sensibilisation. · Contribuer aux processus Change et Incident, ainsi qu'à la veille et à l'alerte CVE sur les composants critiques. Hors périmètre : le support utilisateur niveau 1 et les tests fonctionnels applicatifs. Environnement technique · Middleware : Tomcat, JBoss/WildFly, IIS, WebSphere, Node.js, Apache, Nginx, MQ, Corretto · OS et conteneurs : Linux, Windows Server, Docker, Kubernetes/AKS, durcissement d'images · Gestion des vulnérabilités : CVSS, EPSS, KEV, CVE/NVD, SBOM CycloneDX/SPDX, cycle de patch · Outils sécurité : GitHub Advanced Security, Qualys, Artifactory, MDASH · CI/CD : GitHub Actions, Azure DevOps, security gates · Automatisation : PowerShell, Terraform, Ansible · Cloud : Azure, Defender for Cloud, Key Vault, ACR, Landing Zone Secrets, CyberArk/Conjur, comptes de service, rotation · Reporting : Power BI