Lead DevSecOps Engineer

About the job you’re considering

In Digital Customer Experience we specialize in navigating our clients through the complexities of large-scale, technology-driven transformation programs, using our skills to drive outstanding delivery. Having the right people using the right methodology and following the right process gives every client the right result.

The Platform Engineering capability within Digital is a growing team of people dedicated to ensuring that the technologies selected and the way that they are implemented meet the business objectives of our clients. There are several disciplines within the Digital Customer Experience team: delivery, business, integration and digital architects and technical managers, and many of our people can perform in more than one of these roles.

Your role Design, implement, document and continuously improve Dev Sec Ops  practices across the delivery teams, including:

Secure, automated CI/CD pipelines

Security scanning integrated into build, test and deployment workflows

Vulnerability lifecycle management, including allowlist processes and risk acceptance where required and secrets management and identity/access management;

Policy enforcement for workloads, container images and infrastructure

Observability, monitoring, logging and audit controls;
Also tracking and remediation of technical debt and improvig the quality of developed code Control and governance of change across the path to live ;
Partner with developers to embed secure-by-design engineering and ensure compliance with client’s security standards and technical standards.

Enable and govern Infrastructure as Code (IaC) practices across teams and environments and contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured and actions tracked Also, document security processes, controls and operational runbooks in Confluence.

You can bring your whole self to work. At Capgemini building an inclusive future is part of everyday life and will be part of your working reality. We have built a representative and welcoming environment, for everyone

Your skills and experience

Proven experience as a Dev Sec Ops  Lead, establishing and operating Dev Sec Ops  ways of working and associated tooling across the following areas (hands-on and leading others):

CI/CD and Git Ops (e.g. Git Hub Actions, Argo CD, Argo Rollouts)
Security and compliance tooling (e.g. Trivy scanning and vulnerability management, Hashi Corp Vault, cert-manager)
Containers and orchestration (e.g. Docker, AWS EKS) ;
Infrastructure as Code (e.g. Terraform)
Observability (e.g. Grafana, Loki) ;

Scripting and automation (e.g. Python, Bash)
Cloud and networking fundamentals (e.g. AWS IAM, S3, network policies)
Experience delivering within the UK Government Digital Service (GDS) lifecycle on a public sector engagement.

We are a Disability Confident Employee Capgemini is proud to be a Disability Confident Employer (Level
2) under the UK Government’s Disability Confident scheme.

As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who:

Declare they have a disability, and Meet the minimum essential criteria for the role.

Please opt in during the application process

Your security clearance

To be successfully appointed to this role, it is a requirement to obtain Security Check (SC) clearance.

To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements.

Throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality.

Some posts are restricted to sole UK…