Senior DevSecOps Engineer

Senior Dev Sec Ops  Engineer

London (Hybrid – 1 day per week in office)

£70,000–£100,000 + Benefits

Certus Recruitment is partnering with an ambitious fintech business building a next-generation regulated financial platform. As they move from proof‑of‑concept to full production deployment, they are seeking a Senior Dev Sec Ops  Engineer to take ownership of the operational, infrastructure, and security foundations that will support long‑term growth.

This is a high‑impact role for someone who enjoys building secure, scalable, and compliant environments from the ground up. You'll become the technical authority across infrastructure, cloud operations, Dev Sec Ops , platform security, and compliance readiness, ensuring the business can meet the rigorous standards expected within a regulated financial environment.

Working closely with engineering leadership, you will be responsible for creating the systems, controls, processes, and evidence required to support a secure and auditable production platform.

• Own infrastructure, platform security, and operational readiness across the business
• Design and implement secure cloud environments and production‑grade infrastructure
• Lead security initiatives including vulnerability management, threat modelling, penetration testing, and incident response planning
• Build and evolve CI/CD pipelines, release management processes, and deployment automation
• Establish observability, monitoring, logging, alerting, and operational runbooks
• Manage secrets, key custody, access controls, and infrastructure governance
• Deliver backup, disaster recovery, and business continuity strategies
• Drive compliance readiness for SOC 2, ISO 27001, and regulatory audits
• Partner with software engineering teams to ensure applications are secure, observable, and production‑ready
• Lead infrastructure migration and cloud hardening initiatives

• 6+ years of engineering experience with at least 3 years focused on infrastructure, Dev Sec Ops , platform engineering, or security
• Proven experience operating within highly regulated environments such as fintech, banking, payments, financial services, healthcare, defence, or similar sectors
• Experience taking systems from early‑stage development through to secure production deployment
• Strong background in cloud infrastructure, automation, and operational security
• Experience supporting or leading SOC 2 Type II and/or ISO 27001 programmes
• Strong documentation and communication skills with the ability to create clear technical and compliance‑focused artefacts
• Comfortable acting as the subject matter expert across security, infrastructure, and operational best practices

• Terraform and Infrastructure‑as‑Code environments
• Kubernetes, Docker, and containerised application deployment
• Modern CI/CD platforms including Git Hub Actions, Cloud Build, Buildkite, CircleCI, or similar
• Cloud platforms, ideally GCP
• Observability tooling including Prometheus, Grafana, Open Telemetry, or equivalent
• PostgreSQL operations, backup, recovery, and data durability
• Identity management, API gateways, networking, and access controls
• Bash and Python scripting for automation and tooling

• Exposure to blockchain infrastructure, digital assets, or cryptocurrency ecosystems
• Experience with HSM, KMS, key management, or cryptographic systems
• Familiarity with Kubernetes security, service meshes, and zero‑trust architectures
• Knowledge of event‑driven architectures and messaging platforms such as Kafka
• Understanding of UK financial services regulation and compliance frameworks
• Experience supporting cloud migrations and multi‑environment platform strategies

This is an opportunity to join a business at a pivotal stage of growth and play a leading role in building the infrastructure and security foundations of a highly regulated financial platform. The successful candidate will enjoy significant ownership, technical autonomy, and the opportunity to shape best practices from the ground up.