Lead DevSecOps Engineer

Salary: £? - ? per year

• Proven experience as a Dev Sec Ops  Lead, establishing and operating Dev Sec Ops  ways of working and associated tooling across CI/CD and Git Ops, security and compliance tooling, containers and orchestration, Infrastructure as Code, observability, scripting and automation, and cloud and networking fundamentals.
• Hands‑on and leadership experience with tools and technologies such as Git Hub Actions, Argo CD, Argo Rollouts, Trivy, Hashi Corp Vault, cert‑manager, Docker, AWS EKS, Terraform, Grafana, Loki, Python, Bash, AWS IAM, S3, and network policies.
• Experience delivering within the UK Government Digital Service lifecycle on a public sector engagement.
• Experience working with and leading distributed and hybrid teams.
• Demonstrated ability to work across cross‑functional teams, particularly with developers, testers, and Dev Sec Ops  engineers.
• Strong facilitation, communication, and stakeholder management skills, with experience influencing at multiple levels.
• MOD SC clearance is required.
• Ability to visit our London office circa once a week.

• Drive and coordinate Dev Sec Ops  practices across multiple digital products.
• Design, implement, document, and continuously improve Dev Sec Ops  practices across delivery teams.
• Build and maintain secure, automated CI/CD pipelines.
• Integrate security scanning into build, test, and deployment workflows.
• Manage vulnerability life cycles, including allowlist processes and risk acceptance where required.
• Implement secrets management and identity/access management.
• Enforce policy for workloads, container images, and infrastructure.
• Oversee observability, monitoring, logging, and audit controls.
• Partner with developers to embed secure‑by‑design engineering and ensure compliance with MOD security standards.
• Enable and govern Infrastructure as Code practices across teams and environments.
• Contribute to incident response, patching cycles, and compliance reporting.
• Capture lessons learned and track actions arising from incidents and operational activities.
• Document security processes, controls, and operational runbooks in Confluence.
• Coordinate a consistent release approach across the integrated set of products and platforms in scope.

• AWS
• Azure
• Bash
• CI/CD
• Cloud
• Confluence
• Dev Sec Ops
• Docker
• Git Hub
• Git Ops
• Grafana
• IAM
• Network
• Oracle
• Python
• Security
• Terraform
• Dev Ops

We are a global IT consultancy delivering digital transformation to the MoD. This is a Lead Dev Sec Ops  Engineer role working across the MOD digital estate, including MODCloud and our Azure, AWS, and Oracle Cloud Infrastructure environments. The role is inside IR35, requires MOD SC clearance, and involves office visits to London approximately once a week. You will work closely with developers, Dev Sec Ops  engineers, infrastructure engineers, and test teams to embed security, compliance, and automation across our delivery lifecycle.