DevOps Engineer

A technology consultancy is seeking an experienced, client-facing Lead DevSecOps Engineer for an immediate contract engagement. You will drive, coordinate, and scale DevSecOps practices across a high-profile digital transformation programme within the UK Defence sector.

This role requires an immediate-impact engineer who can operate as a technical anchor, embedding modern GitOps workflows and stringent security compliance across a multi-cloud estate spanning AWS, Microsoft Azure, and Oracle Cloud Infrastructure (OCI). This is a “hands-on and leading others” contract role.

Key Deliverables

• Deploy and Govern Pipelines: Rapidly evaluate, design, and improve secure, automated CI/CD and GitOps pipelines across multiple integrated product teams.
• Vulnerability Management: Seamlessly integrate automated security scanning into build/deployment workflows and manage the vulnerability lifecycle (including allowlist processes and pragmatical risk acceptance).
• Multi-Cloud Policy Enforcement: Standardize secrets management, identity/access management (IAM), and policy enforcement across AWS, Azure, and OCI workloads.
• Cross-Team Collaboration: Partner with developers, infrastructure engineers, and testers to embed secure-by-design principles from day one.
• Observability and Resilience: Ensure robust logging, monitoring, and audit controls are functioning across all environments using cloud-native tools.
• Runbook Documentation: Author and maintain clear security processes, controls, and operational runbooks in Confluence to unify distributed engineering teams.

• Proven Technical Leadership: Experience establishing DevSecOps ways of working for distributed/hybrid teams while remaining deeply hands-on.
• Modern CI/CD and GitOps: Deep production experience with GitHub Actions, Argo CD, and Argo Rollouts for progressive delivery.
• Cloud Native Architecture: Strong hands-on engineering with containers and orchestration (Docker, AWS EKS) and Infrastructure as Code (Terraform).
• Security and Observability Tooling: Hands-on experience with Trivy scanning, HashiCorp Vault, cert-manager, Grafana, and Loki.
• Automation: Expert scripting skills (Python, Bash) paired with robust cloud networking fundamentals (IAM, S3, network policies).
• Public Sector Delivery: Proven experience delivering within the Government Digital Service (GDS) lifecycle on a UK public sector engagement.

Clearance and Logistics

• Security Clearance: Due to the nature of the end-client estate, candidates holding an active MOD SC Clearance will be heavily prioritized to ensure immediate billing. Minimum BPSS is required to start, with the mandate to undergo SC processing.
• Travel Requirements: This is a hybrid contract. While predominantly remote, you must be able to travel to client and consultancy sites in London and/or the Bristol/Bath area an average of 1 day per week (potentially more during critical delivery phases).