DevSecOps Engineering Lead

Salary: £60,000 - 90,000 per year

Requirements:

• Proven experience as a DevSecOps Lead, establishing and operating DevSecOps ways of working and associated tooling across CI/CD and GitOps, security and compliance tooling, containers and orchestration, Infrastructure as Code, observability, scripting and automation, and cloud and networking fundamentals.
• Hands-on experience with CI/CD and GitOps tools such as GitHub Actions, Argo CD and Argo Rollouts.
• Experience with security and compliance tooling such as Trivy, HashiCorp Vault and cert-manager.
• Experience with containers and orchestration technologies such as Docker and AWS EKS.
• Strong Infrastructure as Code experience, especially with Terraform.
• Experience with observability tools such as Grafana and Loki.
• Scripting and automation experience with Python and Bash.
• Solid cloud and networking fundamentals, including AWS IAM, S3 and network policies.
• Experience delivering within the UK Government Digital Service lifecycle on a public sector engagement.
• Experience working with and leading distributed and hybrid teams.
• Demonstrated ability to work across cross-functional teams, particularly with developers, testers and DevSecOps engineers.
• Strong facilitation, communication and stakeholder management skills, with experience influencing at multiple levels.
• SC Clearance eligibility is essential; active SC clearance is highly desired.

Responsibilities:

• Drive and coordinate DevSecOps practices across multiple digital products within a wider business and digital transformation programme.
• Embed security, compliance and automation into the software delivery lifecycle.
• Ensure platforms and applications meet stringent security and operational standards.
• Establish consistent, documented DevSecOps processes across environments.
• Coordinate release processes across the integrated set of products and platforms in scope.
• Design, implement, document and continuously improve secure, automated CI/CD pipelines.
• Integrate security scanning into build, test and deployment workflows.
• Manage vulnerability lifecycles, including allowlist processes and risk acceptance where required.
• Implement secrets management, identity and access management, and policy enforcement for workloads, container images and infrastructure.
• Oversee observability, monitoring, logging and audit controls.
• Partner with developers to embed secure-by-design engineering and ensure compliance with security standards.
• Enable and govern Infrastructure as Code practices across teams and environments.
• Contribute to incident response, patching cycles and compliance reporting.
• Capture lessons learned and track follow-up actions.
• Document security processes, controls and operational runbooks in Confluence.
• Collaborate closely with developers, DevSecOps engineers, infrastructure engineers and test teams.

Technologies:

• AWS
• Azure
• Bash
• CI/CD
• Cloud
• Confluence
• DevSecOps
• Docker
• GitHub
• GitOps
• Grafana
• IAM
• Support
• Network
• Oracle
• Python
• Security
• Terraform
• DevOps

More:

We are recruiting for an experienced, client-facing Lead DevSecOps Engineer to support a wider business and digital transformation programme delivered in partnership with Capgemini as the clients prime Digital Delivery Partner. The role is a contract running until 31/03/2027, offering a hybrid working arrangement that is predominantly remote with occasional visits to Bristol and London for events or team meetings when needed. The rate is up to £690 per day via umbrella inside IR35. The work spans the clients digital estate across Microsoft Azure, AWS and Oracle Cloud Infrastructure, with an emphasis on secure delivery, automation, compliance and coordinated release management across multiple products and platforms.

last updated 39 week of 2026