DevSecOps Engineer - Pathogen

Led by a world-class faculty of scientists, technologists, policy makers, economists and entrepreneurs, the Ellison Institute of Technology aims to develop and deploy commercially sustainable solutions to solve some of humanity’s most enduring challenges. Our work is guided by four Humane Endeavours:
Health, Medical Science & Generative Biology, Food Security & Sustainable Agriculture, Climate Change & Managing Atmospheric CO2 and Artificial Intelligence & Robotics.

Set for completion in 2027, the EIT Campus in Littlemore will include more than 300,000 sq ft of research laboratories, educational and gathering spaces. Fuelled by growing ambition and the strength of Oxford’s science ecosystem, EIT is now expanding its footprint to a 2 million sq ft Campus across the western part of The Oxford Science Park. Designed by Foster + Partners led by Lord Norman Foster, this will become a transformative workplace for up to 7,000 people, with autonomous laboratories, purpose-built laboratories including a plant sciences building and dynamic spaces to spark interdisciplinary collaboration.

The Pathogen Mission highlights EIT’s transformative approach, using Whole Genome Sequencing (WGS) and Oracle’s cloud technology to create a global pathogen metagenomics system. This initiative aims to improve diagnostics, provide early epidemic warnings, and guide treatments by profiling antimicrobial resistance. The goal is to deliver certified diagnostic tools for widespread use in labs, hospitals, and public health.

EIT Oxford fosters a culture of collaboration, innovation, and resilience, valuing diverse expertise to drive sustainable solutions to humanity’s enduring challenges.

EIT is seeking a Dev Sec Ops  Engineer to join the Pathogen Programme. This is an excellent opportunity to help build a secure, automated data platform that supports critical research. In this role, you’ll focus on automation across the development lifecycle, enabling engineers and bioinformaticians to deploy data pipelines and product features efficiently.

You will design and maintain infrastructure, create secure automation pipelines, manage cloud environments, and ensure compliance. Working closely with cross-functional teams, you’ll help deliver solutions that are reliable, scalable, and secure.

• Design, implement, and maintain secure cloud infrastructure using Oracle Cloud Infrastructure (OCI).
• Develop and maintain Infrastructure as Code (IaC) solutions with tools such as Terraform
  , ensuring secure and repeatable deployments.
• Implement and manage CI/CD pipelines with automated security testing, deployment, and monitoring.
• Ensure all components of the data platform—OCI infrastructure, data ingest pipelines, tool deployments, access controls, and monitoring tools—are developed, tested, and deployed using automated best practices.
• Collaborate with bioinformaticians to ensure pipelines are secure by design, version-controlled, and deployed through automated processes.
• Work closely with engineering teams to integrate security throughout feature development and deployment.
• Automate vulnerability assessments to identify and mitigate risks across systems and environments.
• Partner with the security function to embed best practices into new and existing features.
• Ensure compliance with security standards and regulations (e.g.,
  ISO 27001
  , SOC2
  ).
• Implement monitoring solutions to detect and respond to security incidents in real time.
• Perform root cause analysis and troubleshoot infrastructure and security issues in production.
• Collaborate with technical leads to continuously improve security processes and workflows.

• Strong hands-on experience with cloud infrastructure, ideally Oracle Cloud
  , including provisioning, configuration, and service management.
• Proficiency in Terraform or similar infrastructure automation tools.
• Experience implementing and maintaining CI/CD pipelines (e.g., Git Hub Actions) with automated security testing.
• In-depth knowledge of containerization technologies (e.g.,
  Docker
  ) and orchestration tools like Kubernetes
  .
• Solid understanding of cloud security best practices, including IAM
  ,…