Senior DevSecOps Engineer
<p><b>Salary: £50,000 - 50,000 per year</b></p>
<b>Requirements:</b>
<ul><li>Proven experience applying DevSecOps methodologies and working with CI/CD tools (e.g. Azure DevOps)</li><li>Experience embedding security controls into delivery pipelines, including management of Role-Based Access Control (RBAC)</li><li>Strong knowledge of cloud platforms (e.g. Azure), Infrastructure-as-Code (Terraform, ARM, Bicep), and container technologies (Docker, Kubernetes)</li><li>Proficient with version control systems and scripting or programming languages (e.g. PowerShell, C#, TypeScript)</li><li>Demonstrated ability to troubleshoot complex systems and lead incident investigation and resolution across diverse technology stacks</li></ul>
<b>Responsibilities:</b>
<ul><li>Design, build, and maintain secure CI/CD pipelines across cloud environments</li><li>Embed DevSecOps practices, including automated security testing and secure access controls</li><li>Develop and manage Infrastructure-as-Code to ensure consistent, scalable platforms</li><li>Design and deploy secure cloud services and networking</li><li>Integrate pipelines with organisational governance and change processes</li><li>Automate testing and deployments across environments</li><li>Maintain documentation, runbooks, and reusable scripts</li><li>Troubleshoot delivery pipelines and mentor engineers in best practice</li><li>Support the development of IT strategy and technical roadmaps</li><li>Contribute to disaster recovery planning and testing</li><li>Identify and manage technical risks, ensuring compliance with policies and controls</li><li>Maintain governance artefacts and support audits and accreditation</li><li>Ensure systems remain secure, resilient, and up to date</li></ul>
<b>Technologies:</b>
<ul><li>ARM</li><li>Azure</li><li>C#</li><li>CI/CD</li><li>Cloud</li><li>DevSecOps</li><li>DevOps</li><li>Docker</li><li>Support</li><li>Kubernetes</li><li>PowerShell</li><li>RBAC</li><li>Security</li><li>Terraform</li><li>TypeScript</li></ul>
<p><b>More:</b></p>
<p>We are an innovation-driven civil service organisation located in Cardiff, offering a hybrid working model. Our projects are focused on transforming how digital systems are built, deployed, and secured. We provide 31 days of annual leave, bank holidays, and two privilege days in addition to flexible working arrangements. Employees benefit from a generous employer contribution to pensions, as well as time off for wellbeing activities, and access to various subsidised programs. At our core, we embrace diversity and are committed to creating an inclusive workplace where all qualified candidates are encouraged to apply.</p>
<p>last updated 8 week of 2026</p>
<b>Requirements:</b>
<ul><li>Proven experience applying DevSecOps methodologies and working with CI/CD tools (e.g. Azure DevOps)</li><li>Experience embedding security controls into delivery pipelines, including management of Role-Based Access Control (RBAC)</li><li>Strong knowledge of cloud platforms (e.g. Azure), Infrastructure-as-Code (Terraform, ARM, Bicep), and container technologies (Docker, Kubernetes)</li><li>Proficient with version control systems and scripting or programming languages (e.g. PowerShell, C#, TypeScript)</li><li>Demonstrated ability to troubleshoot complex systems and lead incident investigation and resolution across diverse technology stacks</li></ul>
<b>Responsibilities:</b>
<ul><li>Design, build, and maintain secure CI/CD pipelines across cloud environments</li><li>Embed DevSecOps practices, including automated security testing and secure access controls</li><li>Develop and manage Infrastructure-as-Code to ensure consistent, scalable platforms</li><li>Design and deploy secure cloud services and networking</li><li>Integrate pipelines with organisational governance and change processes</li><li>Automate testing and deployments across environments</li><li>Maintain documentation, runbooks, and reusable scripts</li><li>Troubleshoot delivery pipelines and mentor engineers in best practice</li><li>Support the development of IT strategy and technical roadmaps</li><li>Contribute to disaster recovery planning and testing</li><li>Identify and manage technical risks, ensuring compliance with policies and controls</li><li>Maintain governance artefacts and support audits and accreditation</li><li>Ensure systems remain secure, resilient, and up to date</li></ul>
<b>Technologies:</b>
<ul><li>ARM</li><li>Azure</li><li>C#</li><li>CI/CD</li><li>Cloud</li><li>DevSecOps</li><li>DevOps</li><li>Docker</li><li>Support</li><li>Kubernetes</li><li>PowerShell</li><li>RBAC</li><li>Security</li><li>Terraform</li><li>TypeScript</li></ul>
<p><b>More:</b></p>
<p>We are an innovation-driven civil service organisation located in Cardiff, offering a hybrid working model. Our projects are focused on transforming how digital systems are built, deployed, and secured. We provide 31 days of annual leave, bank holidays, and two privilege days in addition to flexible working arrangements. Employees benefit from a generous employer contribution to pensions, as well as time off for wellbeing activities, and access to various subsidised programs. At our core, we embrace diversity and are committed to creating an inclusive workplace where all qualified candidates are encouraged to apply.</p>
<p>last updated 8 week of 2026</p>