Cross Programme DevSecOps Engineering Lead

Salary: £43,500 - 74,500 per year

Requirements:

• We require proven experience as a DevSecOps Lead, including hands-on delivery and leading others.
• We require strong experience with CI/CD and GitOps, such as GitHub Actions, Argo CD and Argo Rollouts.
• We require experience with security and compliance tooling, including Trivy scanning, vulnerability management, HashiCorp Vault and cert-manager.
• We require container and orchestration experience, including Docker and AWS EKS.
• We require Infrastructure as Code experience, particularly Terraform.
• We require observability experience, including Grafana and Loki.
• We require scripting and automation experience, including Python and Bash.
• We require cloud and networking fundamentals, including AWS IAM, S3 and network policies.
• We require experience delivering within the UK Government Digital Service lifecycle on a public sector engagement.
• We require experience working with and leading distributed and hybrid teams.
• We require the ability to work across cross-functional teams, particularly developers, testers and DevSecOps engineers.
• We require strong facilitation, communication and stakeholder management skills, with experience influencing at multiple levels.
• MOD SC clearance is required, and you must be eligible to apply for it.
• Minimum BPSS may be acceptable to start.
• Experience leading DevSecOps engineering for products hosted on the MOD digital estate is highly desirable.
• Experience spanning Microsoft Azure MODCloud ACE / i-ACE, AWS MODCloud ICE and Oracle Cloud Infrastructure MODCloud OCE is highly desirable.

Responsibilities:

• We will drive and coordinate DevSecOps practices across multiple digital products delivered as part of a wider MOD business and digital transformation programme.
• We will embed security, compliance and automation into the software delivery lifecycle.
• We will ensure platforms and applications meet stringent security and operational standards.
• We will establish consistent, documented processes used by DevSecOps engineers across each environment.
• We will coordinate the release of updates across the integrated set of products and platforms in scope.
• We will design, implement, document and continuously improve DevSecOps practices across delivery teams.
• We will build and govern secure, automated CI/CD pipelines.
• We will integrate security scanning into build, test and deployment workflows.
• We will manage vulnerability lifecycles, including allowlist processes and risk acceptance where required.
• We will oversee secrets management and identity/access management.
• We will enforce policy controls for workloads, container images and infrastructure.
• We will support observability, monitoring, logging and audit controls.
• We will partner with developers to embed secure-by-design engineering and ensure compliance with MOD security standards.
• We will enable and govern Infrastructure as Code practices across teams and environments.
• We will contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured and actions tracked.
• We will document security processes, controls and operational runbooks in Confluence.

Technologies:

• AWS
• Azure
• Bash
• CI/CD
• Cloud
• Confluence
• DevSecOps
• Docker
• GitHub
• GitOps
• Grafana
• IAM
• Support
• Network
• Oracle
• Python
• Security
• Terraform
• DevOps

More:

We are a Digital Delivery Partner supporting a wider MOD business and digital transformation programme. The role is predominantly remote, with visits to Bristol and London for events or team meetings, and some travel to client sites averaging around one day per week to London and/or Bristol/Bath with occasional additional travel during delivery phases. The contract start date is ASAP and runs through 31/03/2027, with a flexible inside IR35 rate depending on experience. The role requires MOD SC clearance, with minimum BPSS potentially acceptable to start if you are eligible to apply for MOD SC.

last updated 30 week of 2026