DevSecOps Engineer

Duration: contract to run until 31/03/2027

Location: Hybrid. Bristol visits twice a month – predominantly remote

Clearance required: Active SC Clearance Desired. SC Eligible required

We are seeking an experienced, client-facing Dev Sec Ops  Engineer to support the implementation and operation of Dev Sec Ops  practices across multiple digital products delivered as part of a wider CLIENT business and digital transformation programme, where Capgemini is the client's prime Digital Delivery Partner.

The successful candidate will work closely with development, infrastructure, testing and security teams to embed security, compliance and automation throughout the software delivery lifecycle. Products will be deployed across the CLIENT digital estate (CLIENT Cloud), including Microsoft Azure (CLIENT Cloud ACE / i-ACE), AWS (CLIENT Cloud ICE) and Oracle Cloud Infrastructure (OCI / CLIENT Cloud OCE).

This role requires strong hands‑on experience with CI/CD pipelines, cloud‑native tooling, security controls and automation, alongside the ability to collaborate effectively within multi‑disciplinary delivery teams.

• Support the implementation and continuous improvement of Dev Sec Ops  practices across delivery teams, including:
• Secure and automated CI/CD pipelines
• Security scanning integrated into build, test and deployment workflows
• Vulnerability management and remediation activities
• Secrets management and identity/access controls
• Security policy implementation for workloads, container images and infrastructure
• Observability, monitoring, logging and audit capabilities
• Work alongside developers to promote secure‑by‑design engineering practices and ensure compliance with CLIENT security requirements.
• Develop and maintain Infrastructure as Code (IaC) solutions across cloud environments.
• Support incident response activities, patching cycles and compliance reporting where required.
• Create and maintain technical documentation, operational procedures and runbooks within Confluence.
• Contribute to the ongoing optimisation of Dev Sec Ops  tooling, processes and platform reliability.

Proven experience as a Dev Sec Ops  Engineer within complex cloud‑based delivery environments.

Hands‑on experience across:

• CI/CD and Git Ops (e.g. Git Hub Actions, Argo CD, Argo Rollouts)
• Security and compliance tooling (e.g. Trivy, Hashi Corp Vault, cert‑manager)
• Containers and orchestration (e.g. Docker, Kubernetes, AWS EKS)
• Infrastructure as Code (e.g. Terraform)
• Observability platforms (e.g. Grafana, Loki)
• Scripting and automation (e.g. Python, Bash)
• Cloud and networking fundamentals (e.g. AWS IAM, S3, network policies)
• Experience delivering within the UK Government Digital Service (GDS) lifecycle on a public sector engagement.
• Experience working within distributed and hybrid delivery teams.
• Strong collaboration skills with developers, testers, infrastructure engineers and security teams.
• Effective communication skills with the ability to work directly with technical and non‑technical stakeholders.

• Experience supporting Dev Sec Ops  practices across cloud environments hosted on the CLIENT digital estate, including Microsoft Azure (CLIENT Cloud ACE / i‑ACE), AWS (CLIENT Cloud ICE) and Oracle Cloud Infrastructure (OCI / CLIENT Cloud OCE).
• Experience working within large‑scale digital transformation programmes in the public sector.

All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!