> Markdown version of [/jobs/ext/4594791-software-engineers](https://www.wearedevelopers.com/jobs/ext/4594791-software-engineers). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Software Engineers

- **Company:** Cavendish Professionals
- **Location:** United Kingdom
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Cloud Engineering, Code Review, Cyber Security, Continuous Integration, Open Source Technology, Zero Trust Network Access, Secure Coding, Software Systems, Systems Integration, Policy as Code, Infrastructure Automation Frameworks, Build Tools, Devsecops
- **Published:** November 6, 2026
- **Apply:** https://www.cavendishprofessionals.com/job/iam-pbac-engineering-lead-2/

## About the Role

+ 5+ years' experience in enterprise software engineering.
 + Strong hands-on proficiency in Go (Golang) and Java.
 + Deep understanding of distributed systems, microservices, APIs and software design patterns.
 + Extensive experience implementing and managing CI/CD pipelines, including GitHub Actions, GitLab or Jenkins.
 + Strong knowledge of Secure Development Lifecycle (SDL) practices and secure coding.
 + Understanding of software supply chain security, including SBOMs, dependency management and vulnerability management.
 + Experience with Docker and Kubernetes.
 + Familiarity with AWS, Azure or Google Cloud.
 + Preferred experience with Software Composition Analysis (SCA) tools and DevSecOps. Zero Trust architecture and policy-as-code, and ideallycertifications include CSSLP, CISSP or Security+.

## Description

+ Design, develop and maintain enterprise-grade software solutions using Go and Java.
 + Build scalable and secure applications based on cloud-native architectures.
 + Lead code reviews, contribute to system design and technical strategy, and evaluate and integrate open-source technologies.
 + Implement and manage security controls across software dependencies, build systems and deployment processes.
 + Drive the adoption of SBOMs, dependency management and artifact integrity controls.
 + Collaborate with Cybersecurity teams to develop solutions that mitigate vulnerabilities in open-source components.
 + Design and optimise CI/CD pipelines, integrating automated security testing, including code scanning and dependency analysis.
 + Develop automation to support continuous integration, testing and secure deployments.
 + Promote Infrastructure-as-Code (IaC) best practices.
 + Champion and embed Secure Development Lifecycle (SDL) practices throughout the organisation.
 + Conduct threat modelling and security design reviews, and support the remediation of security findings.
For more information - please apply for this job or send your CV directly and I will call you back to provide you with more details.
Cavendish (Recruitment) Professionals Ltd are proud to be an equal opportunity employer and we believe that inclusivity begins with the candidate experience. All qualified applicants will receive consideration for employment regardless of, gender, race, age, sexual orientation, religion, or belief.