DevSecOps Consultant

INTERNATIONAL TELECOMMUNICATION UNION  

ITU is the leading United Nations agency for information and communication technologies, with the mission to connect the world. To achieve this, ITU manages the radio-frequency spectrum and satellite orbits at the international level, works to improve communication infrastructure in the developing world, and establishes global standards that foster seamless interconnection of a vast range of communication systems. 

ITU applies a zero-tolerance policy against all forms of harassment. ITU is committed to diversity and inclusion within its workforce, and encourages all candidates, irrespective of gender, nationality, religious and ethnic backgrounds, including persons with disabilities, to apply to become a part of the organization. Achieving gender balance is a high priority for ITU.

DevSecOps Consultant 

 Vacancy notice no: 2408 
Sector: BR
Department: IAP
Country of contract: Remote
Duty station: Home Based

 Position number: [[positionNumber]] 
Grade: [[PositionGrade]] 
Type of contract: Consultant
Duration of contract: 6 months
Recruitment open to: External
Application deadline (Midnight Geneva Time): 30 September 2026

ORGANIZATIONAL UNIT

The Radiocommunication Bureau (BR) is responsible for the application of the Radio Regulations and for technical and administrative support of ITU World and Regional Radiocommunication Conferences, Radiocommunication Assemblies and Study Groups. The Bureau also carries out the international regulatory processes for registration of frequency assignments and satellite orbits and assists administrations in their coordination and implementation of frequency spectrum and orbit requirements as well as in resolving cases of harmful interference. It provides the specialised technical secretariat for the work of the Radiocommunication Study Groups and the Radiocommunication Assembly in the development of recommendations for spectrum utilisation and radio system characteristics. The BR is organised into four Departments: Space Services Department, Terrestrial Services Department, Informatics, Administration and Publications Department and the Study Groups Department.

The Informatics, Administration and Publications Department (IAP) comprises of fourDivisions: Space Applications Software (SAS), Terrestrial Applications Software (TAS), Common Software Platform Division (CSP) and Business Operations and Planning Division (BOP). The Department is responsible for the development and maintenance of software and related tools used by the BR as well as software adapted for national frequency management units, providing the necessary user support for the areas concerned. It carries out studies related to policies for the technologies to be used for the information and computational systems within the BR and with administrations in the fields of management of the radio frequency spectrum and the various satellite orbits. The Department is responsible for managing all aspects of the BR's operations, including the development of BR operational plans, organizational support of ITU-R conferences and meetings, BR project management processes and procedures, BR text editing and publications, as well as promotion and membership. The Department is also responsible for human resources management and planning for the BR.

BACKGROUND INFORMATION

This consultancy is within the Common Software Platform Division (CSP) in the Informatics, Administration and Publications Department (IAP) that is responsible for the development and maintenance of software and related tools used in the BR. The objective of this consultancy is to support the implementation of the e-Comment project. E-Comment is a new web application (React frontend/.Net backend) which will replace the SpaceCom legacy desktop application for commenting on coordination requirements established by the BR.

TERMS OF REFERENCE

Under the guidance of the head of the Common Software Platform Division (CSP), the consultant will:

• Conduct a technical assessment of current CI/CD pipelines, build processes, tooling, infrastructure automation, and security practices. Identify areas of improvement areas aligned with best practice DevSecOps standards.
• Create or improve automated Azure DevOps pipelines for web and desktop applications, including building, testing, security scanning, dependency analysis, packaging, and deployment across multiple environments. Establish pipeline templates and standards for scalable reuse across multiple BR applications. Enhance deployment reliability through rollback mechanisms, approvals, and reproducible build practices.
• Integrate automated security scanning (SAST, DAST, SCA, container scanning), vulnerability management, license compliance checks, and secure build practices into all pipelines.
• Containerize appropriate services (where feasible) and design deployment pipelines for cloud platforms (Azure and/or AWS).
• Implement automated workflows for building, packaging, code signing (including Windows executables), and distributing desktop applications in a secure, repeatable manner.
• Configure or improve infrastructure-as-code (IaC) templates, monitoring, logging, and environment provisioning to ensure consistent and reproducible infrastructure.
• Work closely with developers to define requirements, establish DevSecOps standards, and train teams on new tools and processes. Produce clear, maintainable documentation covering DevOps workflows, security practices, pipelines, troubleshooting procedures, and operational guidelines.

CONCRETE DELIVERABLES

• Design and implementation of reusable multi stage YAML pipelines for the e-Comment web application, including: Dev → QA → Prod staged deployments, automated IIS deployment, built in rollback mechanisms, automated unit test execution, code coverage reporting, static code analysis via SonarQube, automated security vulnerability scanning and quality gate checkpoints integrated into the CI process. These pipelines should adopt best practice DevSecOps patterns, support containerization/cloud deployment, and must be designed for reuse across other BR web applications, ensuring a unified and secure development lifecycle.
• Creation of a fully automated desktop application build and release pipeline for SpaceGIBC including secure file-based code signing integration, automated build, packaging, and versioning, staged rollout strategy and automated distribution workflows. The templates should be designed for reusability across other desktop applications. This pipeline should follow secure practices, ensuring reproducible and trusted executable generation.
• Conduct of a technical feasibility assessment for containerizing the SpaceGIBC desktop application, documenting findings, constraints, and recommended architecture. Where feasible, implementation of a proof-of-concept containerized deployment with reusable Azure DevOps pipelines for building, scanning, and deploying container images to a cloud environment. If full containerization is not viable within scope, delivery of a baseline pipeline architecture applicable to other BR applications that are suitable for containerization.
• Conduct of practical training sessions for developers covering Azure DevOps pipeline creation and management, best practices for CI/CD, DevSecOps, and automation and usage of new templates, tools, and workflows.
• Documentation of all implemented processes, pipelines, standards, and procedures in Confluence, ensuring smooth adoption across teams.

COMPETENCIES

• Azure DevOps (multi-stage YAML pipelines, environments, approvals, pipeline templates, Azure Artifacts).
• DevSecOps tooling (SAST, DAST, SCA, container scanning, SonarQube, quality gates).
• Windows desktop application build automation (MSBuild, packaging, versioning, code-signing).
• Containerization and container image management (Docker, Azure Container Registry).
• Cloud deployment on Azure (App Services, AKS or Container Apps, Key Vault).
• Infrastructure-as-Code (Bicep or Terraform), environment provisioning, and basic observability configuration (Azure Monitor, Application Insights).
• Scripting and automation (PowerShell, Bash).
• IIS deployment automation and web application release management.
• Technical documentation and developer training.

QUALIFICATIONS REQUIRED

Education:

Advanced university degree in systems engineering, information technology, computer science or a related field OR education from a reputed college of advanced education with a diploma of equivalent standard to that of an advanced university degree in one of the fields above.

Experience:

At least five (5) years of experience in the field relevant to the Special Service Agreement (SSA).

Required experience:

• Proven experience designing and automating CI/CD pipelines and deployment processes for web and/or desktop applications, primarily in Windows environments using Azure DevOps.
• Demonstrated hands on experience with containerization and deploying applications to cloud environments, preferably Azure and/or AWS.
• Experience applying DevSecOps practices such as automated testing, code quality checks, and security scanning within CI/CD workflows.
• Hands-on experience automating desktop application build pipelines, including packaging, versioning, and code-signing of Windows executables in a CI/CD context.

Desirable experience:

• Experience with Infrastructure as Code and configuration management tools (e.g., Terraform).
• Prior involvement in modernizing legacy build or deployment processes and transitioning them into modern automated CI/CD workflows.
• Experience with AKS, Azure Container Apps, or equivalent orchestration platforms.

Languages:

Knowledge of English or French at advanced level.

REMUNERATION INFORMATION

Between USD 230 and USD 420 per working day to be defined according to the work experience of the consultant.

INFORMATION ON RECRUITMENT PROCESS   

Please note that all candidates must complete an on-line application and provide complete and accurate information. To apply, please visit the ITU Careers website. The evaluation of candidates is based on the criteria in the vacancy notice, and may include tests and/or assessments, as well as a competency-based interview. ITU uses communication technologies such as video or teleconference, e-mail correspondence, etc. for the assessment and evaluation of candidates. Please note that only selected candidates will be further contacted and candidates in the final selection step will be subject to reference checks based on the information provided. Messages originating from a non ITU e-mail account - @itu.int - should be disregarded. ITU does not charge a fee at any stage of the recruitment process.