DevSecOps Experts in Switzerland
matched in minutes by AIHire experts who embed security into CI/CD pipelines, automate compliance checks, and protect cloud-native applications across AWS, Azure, Kubernetes, and GitHub Actions. FRATCH connects you with vetted, available freelancers through fast, precise AI matching.
Meet FRATCH Experts in Switzerland, who have recently used DevSecOps
Christoph P.
Last position:
ICT DevSecOps Engineer & Security Coordinator at Abraxas Informatik AG
- Interface role with the SOC team; improved incident response time by 45% through structured escalation processes and proactive security monitoring.
- Defined technical standards for a multi-tenant enterprise platform (10+ services), resulting in a 30% shorter onboarding time for new clients in the public sector.
- Active knowledge transfer and mentoring of a 6-person team; increased team autonomy and established a sustainable engineering culture.
- Reduced time to market by 50% by optimizing CI/CD pipelines and establishing self-service deployments.
- Stack: GitLab CI/CD, Kubernetes, Nexus, Harbor, ArgoCD, HashiCorp Vault, Grafana, Python, PostgreSQL, Java, Spring Boot, Flyway, Quarkus, JBoss, Loki, Go, Kafka, Kustomize, MongoDB
Markus S.
Last position:
Domain Architect Core Party Data at ING DiBa AG
Technologies: Confluence, PlantUML, BPMN
- As part of the modernization of ING DiBa, the master data management system is also being renewed. As the Domain Architect for this topic, I had to find a way to combine global solution approaches from the headquarters in Amsterdam with local requirements from the German branch in Frankfurt.
Yuri G.
Last position:
Senior Security Devops Engineer at Swisscom
- Implementation and maintenance of highly critical IAM solutions for B2B clients (SSO, MFA, SAML/OIDC, Entra ID, PIM/PAM)
- Security administration of Linux systems (CentOS, Red Hat) in Docker and Kubernetes environments
- Migration from Docker Swarm to Kubernetes
- Infrastructure automation with Terraform
- Planning and execution of risk assessments, threat modeling, and compliance reports
- Development and management of B2B applications (Java, REST/SOAP, Angular) and CI/CD pipelines (Python, Ansible, Jenkins, GitLab)
- Leading integration tests and UAT (Cucumber, Selenium, Katalon)
- Implementing monitoring and observability strategies with Grafana, Prometheus, and Splunk
- Integrating SAST tools like Snyk and SonarQube
- Release management and project coordination according to Scrum and SAFe
- Mentoring and technical support of junior team members
Michael S.
Last position:
Freelance compliance & IT regulatory consultant at Various financial institutions and regulated companies
- Consulting financial institutions on implementing DORA and NIS2 requirements
- Gap analyses between existing governance structures and new regulatory requirements
- Creation and revision of policies, process descriptions, contract annexes, and technical-organizational measures
- Design of digital operational resilience testing programs (DORA Art. 24–25)
- Third-party risk management: building third-party registers, LEI matching, value chain analysis
- Training internal staff on DORA/NIS2 requirements
- Negotiation and renegotiation of outsourcing contracts according to DORA/NIS2 guidelines
- Use of technologies/frameworks: DORA, NIS2, EBA guidelines, BaFin requirements, NIST CSF, ISO 27001
- Engagements are subject to strict NDAs
Christoph J.
Last position:
Project management, Software engineering, Software architect, DevOps at Migros Genossenschafts Bund
- Greenfield project M-Zollmanager: Development of an internal platform to support users in booking requirement areas on line items in assessment notices.
- Greenfield project M-Deliveryplan: Development of an internal platform for planning and tracking deliveries in the international transport sector.
- Created functions to predict the estimated arrival time of container ships and goods from the port of loading to the port of destination, considering potential events.
- Developed the TrackAndTrace add-on for M-Deliveryplan to track and plan goods and containers.
- Built a generic AI chatbot for Migros app infrastructure, including ChatGPT integration and creating AI workflows with N8N.
- Developed AI assistants to automate repetitive tasks, such as creating release notes or processing Jira tasks based on N8N workflows.
- Further development and maintenance of the M-LFS, M-Vehicleaccess and M-Worklog apps.
- Used C#, Angular 18, DevOps practices, N8N, Kubernetes, Docker, Jira, Confluence and Azure.
- Ongoing project with continuous development of platforms and workflows.
Stefan H.
Last position:
Fullstack Development, Product Owner & Tech Lead at Trex AG
- Business analysis, architecture, and implementation of a telemedicine platform for pet owners.
- Leading the development team as Product Owner and Tech Lead.
- Introducing agile processes, setting up development guidelines and system documentation.
- Planning and implementing features like video calls, live chat, and marketing automation.
- Implementing AI-based features such as automated tagging of information (missing pet reports, marketplace entries, etc.), preparation of social media content, and processing of conversation transcripts.
- Skills: Angular, NGXS, Tailwind, Java, Spring Boot, Kubernetes, Docker, CI/CD, MySQL, LLMs, RAG, MCP, Redis, OpenSearch.
- Industry: Veterinary medicine.
Discover over 15,000 top freelancers
Statistics of experts using DevSecOps
Aggregated from the professional profiles of matched freelancers.
Experience
20 years
Position duration
1.7 years
Positions per freelancer
24
Top business areas
Information Technology, Operations, Product Development
Top industries
Energy, Healthcare, Information Technology
Certification focus areas
Information Technology, Business Intelligence
Certifications per freelancer
2
Most common languages
German, English, French
Speak two or more languages
100%
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Switzerland are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Switzerland using DevSecOps
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
DevSecOps experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Energy (83%)
- Healthcare (83%)
- Information Technology (83%)
- Banking and Finance (67%)
- Professional Services (67%)
- Retail (67%)
- Education (50%)
- Insurance (50%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
What DevSecOps covers
DevSecOps integrates security into software delivery instead of treating it as a final review. Teams combine development, operations, and security practices to identify weaknesses early, automate controls, and release applications with clear evidence of protection. The approach applies to web services, APIs, mobile backends, data platforms, and cloud infrastructure.
Core ecosystem
DevSecOps work spans source control, build systems, infrastructure, containers, and runtime monitoring. Specialists commonly use GitHub Actions, GitLab CI/CD, Jenkins, Terraform, Kubernetes, Docker, and cloud security services from AWS, Microsoft Azure, or Google Cloud. They connect these tools so security findings reach the right team without blocking useful delivery.
Typical deliverables
A freelance specialist may design a secure delivery model or improve an existing pipeline. Common assignments include:
- Integrating SAST, DAST, software composition analysis, and secret scanning
- Hardening container images, Kubernetes clusters, and infrastructure as code
- Creating security gates, policy checks, and audit-ready reporting
- Establishing vulnerability triage and remediation workflows
When companies need help
Companies bring in DevSecOps expertise when releases are fast but security checks remain manual, fragmented, or too late. It is also valuable during cloud migrations, platform modernization, regulated product launches, incident follow-up, and the creation of internal developer platforms. In Switzerland, specialists may support distributed teams across German-, French-, Italian-, and English-speaking environments, remotely or on site.
Skills beyond the label
Strong professionals understand application security, networking, identity and access management, threat modeling, and secure coding. They can read pipeline configuration, review Terraform and Kubernetes manifests, interpret vulnerability results, and explain risk to product and engineering stakeholders. Experience with security standards, logging, incident response, and supply-chain protection adds practical depth.
How quality is assessed
Look for specialists who can show how they reduced exposure without creating unmanageable process overhead. Ask for examples of pipeline architecture, security tooling decisions, false-positive handling, and measurable remediation ownership rather than a tool list alone. High-quality work includes clear documentation, useful developer feedback, sensible exceptions, and controls that remain effective after handover.
Frequently asked questions
What clients ask us most about DevSecOps — answered in short.
DevSecOps is used to build security into software development, testing, deployment, and operations. It helps teams scan code, dependencies, containers, infrastructure, and running services while delivery work is still in progress.
DevSecOps adds explicit security ownership and automated controls to the DevOps lifecycle. Traditional DevOps can still rely on a separate security review near release, while DevSecOps moves checks earlier and connects findings to delivery workflows.
A strong DevSecOps specialist often combines cloud security, application security, identity management, threat modeling, and secure coding knowledge. Practical experience with CI/CD, Terraform, Docker, Kubernetes, logging, and incident response is also valuable.
A DevSecOps engagement may produce a secure CI/CD design, integrated scanning, policy controls, vulnerability workflows, and documentation. The exact scope depends on the current architecture, risk profile, regulatory context, and ability of internal teams to maintain the result.
The right DevSecOps specialist should have handled systems similar in complexity, sensitivity, and deployment model to the project at hand. A pipeline improvement may need focused delivery experience, while a cloud security transformation calls for broader architecture, governance, and operational judgment.
DevSecOps work is often suitable for remote collaboration because pipelines, repositories, cloud consoles, and documentation are accessed online. On-site sessions in Switzerland can still help with discovery, risk workshops, stakeholder alignment, or access requirements involving sensitive environments.
Ask a DevSecOps professional to explain how they select controls, manage false positives, prioritize vulnerabilities, and avoid slowing delivery unnecessarily. Strong answers connect security decisions to business risk and include ownership, documentation, observability, and a plan for ongoing maintenance.
DevSecOps and secure DevOps usually describe the same broad practice: integrating security throughout the delivery lifecycle. The terminology varies, but credible work should cover automated testing, secure configuration, supply-chain protection, runtime awareness, and shared responsibility.
The average hourly rate of freelancers in Switzerland who have used DevSecOps in their recent projects is 117 €, which corresponds to a daily rate of about 940 € based on an 8-hour working day.
On average, freelancers in Switzerland who have used DevSecOps in their recent projects have 20 years of professional experience, with a single engagement typically lasting around 1.7 years.
The most common languages among freelancers in Switzerland who have used DevSecOps in their recent projects are German (100%), English (100%), and French (33%).
The most common industries among freelancers in Switzerland who have used DevSecOps in their recent projects are Energy (83%), Healthcare (83%), and Information Technology (83%).
The most common business areas among freelancers in Switzerland who have used DevSecOps in their recent projects are Information Technology (100%), Operations (83%), and Product Development (83%).
Main locations of FRATCH Experts, who have recently used DevSecOps
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Countries:
Zurich Geneva Basel Bern Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
