DevOps Engineer (UK)

Own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supplychain integrity across teams.

Core Responsibilities: Design and maintain Groovy pipeline steps (build, test, package, scan, deploy). Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container). Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch). Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling). Refactor legacy scripts (remove global state, consolidate hashing, standardize templates). Document ci-config.yaml standards and usage patterns. Mentor engineers on secure pipeline development and supply-chain practices. Troubleshoot and prevent pipeline incidents., non London (Hybrid) - Candidate must be in office 3 days a week in their local office either Sheffield, Leeds, Birmingham or Edinburgh.

Deliverables (First 30 Days): - Current state assessment: audit shared library structure with view to understand all building blocks and modules support requests: work on user's reported issues to get to know critical parts of the pipeline and various configuration options. Identify bugs, classify them and develop hot fixes. feature requests: deliver 2 x small features/improvements to pipeline code.

My client is looking for a DevOps Engineer (Python, Jenkins, Maven) to work as part of a team write modules to add and edit fuctionality to the platform. They have a bunch of Python and Groovy codes that all hang together on a .Net build and looking for someone to improve the platform where needed and possible.

• 5+ years DevOps experience

• Python - writing codes to add/edit functionality for the platform

• Jenkins - to automate software development, building, testing, deploying and facilitating CI/CD

• Maven - to build automation and standadize this and manage dependencies

• Large scale enterprise experience needed in a highly regulated environment i.e. banking, financial services etc.

Nice to have

• Observability - Prometheus, Grafana, OpenTelemetry

• Kubernetes, 7+ years engineering; 3+ in CI/CD platform or DevSecOps. Strong Jenkins + Groovy shared library expertise. Advanced Python automation (JSON/YAML processing, tooling scripts). Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata. Supply-chain security (SLSA, CycloneDX SBOM, digests). Experience with SonarQube, Sonatype IQ, container and SAST scanning. Proven performance tuning (caching, parallelization, dependency pruning). Compliance Awareness.

Nice-to-Have Artifact signing / attestations (cosign, OCI). Terraform module and Helm chart publishing patterns. GitOps or release automation experience. GCP/AWS cloud experience

Soft Skills: - Precise communicator documentation discipline. - Ownership mindset, able to operate with minimal supervision. Engagement Details: -