About this role
About the RoleWe are seeking a highly skilled Senior DevSecOps Engineer to design, automate, and maintain secure, scalable, and resilient infrastructure and deployment pipelines. You will play a key role in integrating security into development workflows and infrastructure operations across cloud and on-premise environments. This role requires strong expertise in cloud platforms, infrastructure automation, CI/CD, security engineering, and modern DevSecOps practices. You will work closely with engineering, operations, and security teams to drive automation, reliability, and compliance at scale. Key ResponsibilitiesInfrastructure & Automation• Design and implement automation solutions for deployment, scaling, monitoring, and infrastructure management across cloud and data centre environments. • Provision and manage virtual machines, databases, containers, and supporting infrastructure for development teams. • Build and maintain CI/CD pipelines with streamlined release and change management processes. • Develop scripts and automation tools to support software build, integration, testing, and deployment. • Automate configuration management across development, QA, and production environments. • Optimise system reliability, performance, and service availability through monitoring and automation. • Implement disaster recovery, backup, and business continuity solutions. • Deploy and manage infrastructure monitoring and observability tools. Security & Compliance• Implement security best practices and controls aligned with industry standards and organisational policies. • Design and maintain secure system architectures, including threat modelling and risk assessments. • Conduct vulnerability assessments, system hardening, and security troubleshooting. • Integrate security controls into CI/CD pipelines and cloud-native platforms. • Support compliance initiatives across regulated and security-sensitive environments. • Manage secrets, access controls, and zero-trust security practices where applicable. Operations & Support• Troubleshoot and resolve infrastructure, platform, and application issues across environments. • Participate in incident response and on-call support for critical production systems. • Take ownership of end-to-end infrastructure and security solutions across the organisation. RequirementsQualifications & Experience• Degree or Diploma in Computer Science, Information Technology, Engineering, or a related discipline. • Strong understanding of SDLC, CI/CD, DevOps, and Test-Driven Development (TDD). • Experience managing high-availability, high-performance, and secure hybrid cloud environments. • Proficiency in Shell scripting, YAML, and Infrastructure-as-Code (IaC). • Experience with Git and modern branching strategies. • Hands-on experience with cloud platforms such as AWS, Azure, or Google Cloud Platform. • Experience with automation and provisioning tools such as Terraform, Ansible, Puppet, or Vagrant. • Strong understanding of containerisation and orchestration technologies including Docker and Kubernetes. • Familiarity with CNCF ecosystem tools such as Prometheus, Helm, ArgoCD, Istio, Gatekeeper, and Crossplane. • Experience with monitoring, observability, backup, and disaster recovery solutions. • Strong troubleshooting and problem-solving skills across infrastructure and application layers. Security & DevSecOps Expertise• Experience implementing security controls within CI/CD pipelines and cloud-native architectures. • Hands-on experience with vulnerability scanning, security assessments, and system hardening. • Familiarity with enterprise security tools such as HashiCorp Vault, Tenable, HP Fortify, Sonatype Nexus IQ, and AWS security services. • Strong knowledge of networking concepts including firewalls, subnets, routing, and access controls. • Experience operating in government, regulated, or high-security environments is an advantage. Preferred Qualifications• Security certifications such as CISSP, CISM, CREST, or cloud security certifications. • Experience driving or supporting DevSecOps transformation initiatives. • Familiarity with ISO 27001, NIST, CIS Benchmarks, and related security frameworks. • Experience with API security, secrets management, and service mesh security implementations such as Istio or Linkerd.
Also in Government Policy