DevOps Engineer – Cleanroom

---

Aanvraagnummer: 40789
Contractvorm: Detachering
Organisatie: Rabobank
Locatie: Croeselaan 18, Utrecht
Uren per week: 40 per week
Tarief: Geen maximum
Duur van de opdracht: 21 maanden
Regio: Utrecht
Startdatum: Z.S.M.
Optie tot verlenging: Nee
Sluitingsdatum: 02-06-2026 15:00

LET OP! Reacties dienen minimaal 1 werkdag voor de sluitingsdatum binnen te zijn voor tijdige verwerking.

---

Important:
• Due to the large expected professionals for this position, we unfortunately can not provide substantive feedback for all rejected candidates;
• We are only looking for 1FTE. We will close the vacancy before the indicated deadline when we received enough professionals. Please upload you most suitable candidate as soon as possible;
• Suppliers can offer just one candidate for this position. Multiple candidates per supplier are not allowed, all candidates will be rejected.
• Language: English mandatory;
• ZZP Allowed: No;
• Please provide the CV in English.

Description Vacancy: Cleanroom DevOps Engineer

Context of the job:
The DevOps Engineer for the Cleanroom (Ransomware Recovery) environment will be working within the Engineering & Enterprise Tech, Storage Services team, involved in supporting, designing, implementing, automating and testing IT infrastructure components and engineering applications.

Focus will be on the security aspects of the rapidly developing services for ransomware protection and recovery.
You will deliver and maintain a largely autonomous environment which in the event of a successful ransomware attack on the bank will allow the speedy recovery of multiple affected systems into ring fenced environments where they can be analysed, cleansed of any malware and rapidly recovered in the production environments.

Your area of responsibility will be to protect and recover both application data and infrastructure configuration data. Cutting edge technology, security and extensive automation will be mainstream elements of your job.
The environment you build is the last resort for Rabobank systems in the event of a ransomware attack.

The nature of the Cleanroom environment means you must be versatile and knowledgeable and have a curious mindset regarding multiple supporting technologies.

Required skills:
• Proficiency in VMware Aria Automation is essential
• Understanding of ransomware resilience strategies, including recovery planning, immutable backups, and air gapping
• Knowledge of security hardening best practices
• Experience with Role based access control (RBAC) and privilege management
• Understanding of common malware techniques, and attacker behavior
• Experience with vulnerability management and risk assessment
• Understanding of cryptography, certificate handling, and secrets management
• Ability to implement, and manage network segmentation
• Experience with Terraform is preferred
• Familiarity with Ansible is advantageous

The key areas of responsibility are:
• Deliver infrastructural improvements and new developments in the field of infrastructure security, recovery, and automation.
• Support and optimize security and recovery for our compute, converged, storage, backup and archive environments with 21,000 VM’s and nearly 20 PB of data across Europe and the Americas. These systems host thousands of applications and millions of customers.
• Share knowledge and learn. You will be working in a multi-disciplinary and international team interacting with multiple services already available in our department.

For this role additional focus is the responsibility to ensure the Cleanroom systems meet security standards. Furthermore you will be responsible for supporting the Cleanroom environment on a day to day basis, this includes incident, problem and change management

You are an experienced versatile T-shaped engineer and will be working with a small squad of versatile experts, expanding an existing ransomware recovery solution that has the ability to act as an autonomous boot-strap environment to rebuild components of the bank. Solutions will be practical, supportable and performant and compliant.

Additional information:
• All departments are working hybrid, in terms of Rabobank @anywhere policy;
⁠• Please note: midlance constructions are not allowed according to Rabobank policy. Do not offer candidates via this construction. This will be investigated during the screening;
• Suppliers must be aware of the laws and regulations regarding employment conditions and Rabobank’s Collective Labour Agreement. This assignment is placed in scale 9;
• We would like to receive the personal motivation of the candidate and CV in English;
• A candidate should be submitted exclusively to – Rabobank during the exclusivity period of 4 business days on one request;
• Furthermore, the candidate has to be available throughout the entire duration of the assignment;
• All submitted candidates must be in possession of a valid Passport or ID card, which must be taken along to the interview and at the start of the assignment;
• Pre-employment screening: If the candidate is selected to start, a pre-employment screening will be executed. We will send you the required documents to be filled in and returned as soon as possible. Your candidate is only allowed to start after the pre-employment screening has been completed successfully;

---