Lead DevSecOps Engineer - Clerkenwell

Salary: £? - ? per year

• Proven experience as a Dev Sec Ops  Lead, establishing and operating Dev Sec Ops  ways of working and associated tooling across CI/CD and Git Ops, security and compliance tooling, containers and orchestration, Infrastructure as Code, observability, scripting and automation, and cloud and networking fundamentals.
• Hands-on experience with tools and technologies such as Git Hub Actions, Argo CD, Argo Rollouts, Trivy, Hashi Corp Vault, cert-manager, Docker, AWS EKS, Terraform, Grafana, Loki, Python, Bash, AWS IAM, S3, and network policies.
• Experience delivering within the UK Government Digital Service lifecycle on a public sector engagement.
• Experience working with and leading distributed and hybrid teams.
• Demonstrated ability to work across cross-functional teams, particularly with developers, testers, and Dev Sec Ops  engineers.
• Strong facilitation, communication, and stakeholder management skills, with experience influencing at multiple levels.

• We design, implement, document, and continuously improve Dev Sec Ops  practices across delivery teams.
• We build secure, automated CI/CD pipelines and integrate security scanning into build, test, and deployment workflows.
• We manage the vulnerability lifecycle, including allowlist processes and risk acceptance where required.
• We oversee secrets management, identity and access management, and policy enforcement for workloads, container images, and infrastructure.
• We maintain observability, monitoring, logging, and audit controls.
• We partner with developers to embed secure-by-design engineering and ensure compliance with MOD security standards.
• We enable and govern Infrastructure as Code practices across teams and environments.
• We contribute to incident response, patching cycles, and compliance reporting, ensuring lessons learned are captured and actions are tracked.
• We document security processes, controls, and operational runbooks in Confluence.
• We drive and coordinate Dev Sec Ops  practices across multiple digital products and support coordinated release activity across the integrated platform estate.

• AWS
• Azure
• Bash
• CI/CD
• Cloud
• Confluence
• Dev Sec Ops
• Docker
• Git Hub
• Git Ops
• Grafana
• IAM
• Network
• Oracle
• Python
• Security
• Terraform
• Dev Ops