Lead DevSecOps Engineer

Salary: £60,000 - 100,000 per year

Requirements:

• Demonstrated hands-on experience in DevOps, SRE, platform engineering, DevSecOps, or a related role, including guiding technical decisions or mentoring colleagues
• Experience building and maintaining CI/CD pipelines and release automation, ideally with GitHub Actions or similar tools
• Hands-on experience with Infrastructure as Code and cloud platform automation using Terraform
• Experience owning production reliability, including observability, service-level objectives, incident management, post-incident reviews, capacity planning, and disaster-recovery testing
• Practical experience conducting security reviews and implementing controls for identity, secrets management, software supply chains, and vulnerability management
• Experience working directly with cloud providers or technology vendors, ideally Microsoft or Google Cloud, on service reviews, escalations, or roadmap discussions
• Practical experience monitoring and optimizing cloud expenditure across large Azure or GCP environments
• Preferred: Experience building internal developer platforms or self-service cloud capabilities
• Preferred: Experience applying image scanning, artifact signing, or software provenance controls to containerized workloads
• Preferred: Familiarity with cloud security posture management, policy-as-code, security monitoring, or compliance automation
• Preferred: Experience supporting AI/ML workloads and SaaS platforms in production

Responsibilities:

• Lead DevSecOps capabilities that help engineers build, release, and operate services across our multi-cloud platform
• Shape CI/CD, Infrastructure as Code, observability, reliability, cloud governance, and secure engineering across Microsoft Azure and Google Cloud Platform
• Manage cloud-vendor service reviews, security advisories, escalations, and roadmap discussions
• Evolve CI/CD pipelines and reusable workflows for fast, reliable, repeatable testing and deployment, with automated quality and security controls
• Build observability and operational readiness through monitoring, logging, tracing, runbooks, and incident response, improving production reliability and performance
• Define and track service reliability objectives and recovery requirements for production services, using incident reviews to drive continuous improvement
• Embed proportionate security into engineering workflows and cloud environments, including platform security reviews, threat modeling, access and secrets management, automated scanning, and vulnerability remediation
• Monitor cloud security posture across Azure and GCP, helping teams prioritize misconfigurations, vulnerabilities, and remediation work according to risk
• Manage technical and service relationships with Microsoft, Google Cloud, and other critical vendors, leading service reviews, security advisory responses, escalations, and roadmap and cost discussions
• Partner with platform, product, and AI/ML engineers on architecture decisions, mentor colleagues, and make trade-offs across developer experience, reliability, performance, cost, and security

Technologies:

• AI
• Azure
• CI/CD
• Cloud
• DevSecOps
• DevOps
• GCP
• GitHub
• Incident Management
• Support
• Security
• Terraform
• Network

More:

We are AECOM, a global infrastructure consulting firm partnering with public- and private-sector clients to address complex challenges in water, environment, energy, transportation, and buildings. Our teams deliver sustainable and resilient solutions throughout the project lifecycle, from advisory, planning, design, and engineering to program and construction management. In our AI Engineering team, we build AI-driven products that transform how infrastructure and buildings are designed and engineered, reducing waste and emissions while improving efficiency and sustainability. Youll join a lean, highly technical team with the speed and ownership of a startup, backed by the scale, resources, and expertise of a leading global engineering firm. We offer a full-time, mid-senior-level role in information technology, along with benefits that may include medical, dental, vision, life, disability, paid leave, flexible work options, well-being resources, retirement savings, and employee stock purchase plans, depending on employment status. Our hiring process includes a screening call, a take-home challenge, and technical and culture interviews. Newly hired employees must attend in-person Day 1 onboarding at an AECOM office. We support employee growth through training and development, groundbreaking projects, and a collaborative workplace. We are a Disability Confident Employer and offer an interview through the Disability Confident Interview Scheme to applicants with a disability or long-term condition who meet the roles minimum essential criteria.

last updated 40 week of 2026