Cross Programme Devsecops Engineering Lead - Remote

Cross Programme Dev Sec Ops  Engineering Lead – MUST BE SC CLEARED – Remote + London/Bristol/Bath – 8 months+ – RATE: £655 per day inside IR35

One of our Blue Chip Clients is urgently looking for a Cross Programme Dev Sec Ops  Engineering Lead.

Hybrid role, predominantly remote, with some travel to various sites (estimated average 1 day per week to London and/or Bristol/Bath; occasionally more during specific delivery phases).

Clearance required:

MOD SC

We are seeking an experienced, client‑facing Lead Dev Sec Ops  Engineer to drive and coordinate Dev Sec Ops  practices across multiple digital products delivered as part of a wider MOD business and digital transformation programme, Products will be deployed across the MOD digital estate (MODCloud), including MOD's instances of Microsoft Azure (MODCloud ACE/i-ACE), AWS (MODCloud ICE) and Oracle Cloud Infrastructure (OCI/MODCloud OCE).

Embed security, compliance and automation into the software delivery life cycle, ensuring platforms and applications meet stringent security and operational standards. Establish consistent, documented processes used by Dev Sec Ops  engineers across each environment, including a coordinated approach for releasing updates across the integrated set of products and platforms in scope.

This role requires deep expertise in CI/CD pipelines, delivery workflows and security tooling across these cloud environments, alongside strong collaboration with developers, Dev Sec Ops  engineers, infrastructure engineers and test teams.

• Secure, automated CI/CD pipelines
• Security scanning integrated into build, test and deployment workflows
• Vulnerability life cycle management, including allowlist processes and risk acceptance where required
• Secrets management and identity/access management
• Policy enforcement for workloads, container images and infrastructure
• Observability, monitoring, logging and audit controls
• Partner with developers to embed secure‑by‑design engineering and ensure compliance with MOD security standards
• Enable and govern Infrastructure as Code (IaC) practices across teams and environments
• Contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured and actions tracked
• Document security processes, controls and operational runbooks in Confluence

• Proven experience as a Dev Sec Ops  Lead, establishing and operating Dev Sec Ops  ways of working and associated tooling across the following areas (hands‑on and leading others)
• CI/CD and Git Ops (eg Git Hub Actions, Argo CD, Argo Rollouts)
• Security and compliance tooling (eg Trivy scanning and vulnerability management, Hashi Corp Vault, cert‑manager)
• Containers and orchestration (eg Docker, AWS EKS)
• Infrastructure as Code (eg Terraform)
• Observability (eg Grafana, Loki)
• Scripting and automation (eg Python, Bash)
• Cloud and networking fundamentals (eg AWS IAM, S3, network policies)
• Experience delivering within the UK Government Digital Service (GDS) life cycle on a public sector engagement
• Experience working with and leading distributed and hybrid teams
• Demonstrated ability to work across cross‑functional teams, particularly with developers, testers and Dev Sec Ops  engineers
• Strong facilitation, communication and stakeholder management skills, with experience influencing at multiple levels

• Experience leading Dev Sec Ops  engineering for products hosted on the MOD digital estate, spanning Microsoft Azure (MODCloud ACE/i-ACE), AWS (MODCloud ICE) and Oracle Cloud Infrastructure (OCI/MODCloud OCE)

Hybrid role, predominantly remote, with some travel to various sites (estimated average 1 day per week to London and/or Bristol/Bath; occasionally more during specific delivery phases).

Please send CV for full details and immediate interviews. We are a preferred supplier to the client.