DevSecOps / DevOps Engineer

Applicants must be a UK national with no other nationality and be able to receive and hold SC government security clearance.

DevSecOps Engineer

Manage and support Morton's endpoint and training device estate, including Windows laptops, mobile phones, iPads, and fielded training equipment, with responsibility for Intune administration, MDM, security compliance, and asset management.

Required - Essential experience

1. Containers: Strong experience with containerised software delivery using platforms such as Kubernetes or OpenShift (YAML, etc.).

2. CI/CD: Experience building and maintaining CI/CD pipelines with automated testing, security scanning, dependency checking, and controlled deployment.

3. Cloud: Ability to manage deployments into constrained enterprise or government cloud hosting environments.

4. Control: Experience with logging, monitoring, patching, rollback, and operational support of live systems.

5. Security: Strong understanding of secure-by-design principles, including secrets handling, TLS, access control, auditability, and vulnerability management.

6. Team Work: Able to work across development, security, operations, and customer/platform teams to resolve technical blockers.

7. GIT: Familiarity with Git-based workflows, release governance, artefact management, and environment promotion.

8. Defence: Willingness to work in the defence and security sector.

Expected - Not all essential

1. Tooling: Hands-on experience with tools such as SonarQube, Argo, Tekton, OpenShift, Kubernetes, GitHub, or closely related equivalents.

2. Process: Experience producing deployment documentation, runbooks, technical evidence, and operational procedures.

3. Troubleshoot: Able to troubleshoot issues across development, test, integration, and hosted environments.

4. Reviews: Comfortably support design reviews, security reviews, and formal acceptance activity.

Preferred - Nice to have

1. MODCloud: Prior experience with MOD, Defence Digital, or similarly controlled environments.

2. Hardening: Exposure to SAST, DAST, dependency scanning, container hardening, and remediation workflows.

3. Integration: Experience supporting API-led systems, SSO integration, and cross-team interface management.

4. KeyCloak: Experience with SSO, RBAC, audit logging, and regulated or security-conscious environments.

5. Defence: Experience in defence, or high-assurance delivery environments.

6. Training: Experience in training or simulation environments.

7. UML: Experience reading and creating UML diagrams and architecture.

Job Types: Full-time, Permanent

Pay: £36,340.03-£85,187.88 per year

Benefits:

• Company pension

Morton Technologies is a UK-based software and engineering company specialising in expert solutions for training, modelling, and simulation in defence and security. Established in 2016 and now nearing a decade in operation, Morton focuses on simulation and synthetic training, as well as broader software innovation across modelling and simulation, systems engineering, virtual and augmented reality, artificial intelligence, and research-driven development. Its portfolio includes projects involving electromagnetic decision support, maritime synthetic training, AI for war gaming, maintenance trainers, aircraft loader trainers, digital mock-ups, and data-driven analytical tools. We are a professional, delivery-oriented business dedicated to helping customers design, develop, deliver, and maintain complex software and hardware solutions. Our work takes place in environments where technical quality, reliability, and a clear understanding of user needs are essential. This makes Morton an ideal partner for those aiming to build serious software with a genuine operational purpose. Initial Project EPIC is an exciting new training application for defence. It is being developed to support collective training delivery through a secure, modern, responsive platform that runs on tablets and other end-user devices, and integrates with wider training and support systems. Working Arrangements, Office and Travel Our office is based in Aztec West, Bristol, where our development team is situated. This role supports flexible hybrid working, including working from home, subject to project, security, integration, testing, and customer-site requirements. There will also be some occasional national and international travel needed to support training.