About this role
Salary: £? - ? per year
Requirements: Proven experience as a DevSecOps Lead, establishing and operating DevSecOps ways of working and associated tooling across CI/CD and GitOps, security and compliance tooling, containers and orchestration, Infrastructure as Code, observability, scripting and automation, and cloud and networking fundamentals.Hands-on and leadership experience with tools and technologies such as GitHub Actions, Argo CD, Argo Rollouts, Trivy, HashiCorp Vault, cert-manager, Docker, AWS EKS, Terraform, Grafana, Loki, Python, Bash, AWS IAM, S3, and network policies.Experience delivering within the UK Government Digital Service lifecycle on a public sector engagement.Experience working with and leading distributed and hybrid teams.Demonstrated ability to work across cross-functional teams, particularly with developers, testers, and DevSecOps engineers.Strong facilitation, communication, and stakeholder management skills, with experience influencing at multiple levels.MOD SC clearance is required.Ability to visit our London office circa once a week. Responsibilities: Drive and coordinate DevSecOps practices across multiple digital products.Design, implement, document, and continuously improve DevSecOps practices across delivery teams.Build and maintain secure, automated CI/CD pipelines.Integrate security scanning into build, test, and deployment workflows.Manage vulnerability lifecycles, including allowlist processes and risk acceptance where required.Implement secrets management and identity/access management.Enforce policy for workloads, container images, and infrastructure.Oversee observability, monitoring, logging, and audit controls.Partner with developers to embed secure-by-design engineering and ensure compliance with MOD security standards.Enable and govern Infrastructure as Code practices across teams and environments.Contribute to incident response, patching cycles, and compliance reporting.Capture lessons learned and track actions arising from incidents and operational activities.Document security processes, controls, and operational runbooks in Confluence.Coordinate a consistent release approach across the integrated set of products and platforms in scope. Technologies: AWSAzureBashCI/CDCloudConfluenceDevSecOpsDockerGitHubGitOpsGrafanaIAMNetworkOraclePythonSecurityTerraformDevOps More:
We are a global IT consultancy delivering digital transformation to the MoD. This is a Lead DevSecOps Engineer role working across the MOD digital estate, including MODCloud and our Azure, AWS, and Oracle Cloud Infrastructure environments. The role is inside IR35, requires MOD SC clearance, and involves office visits to London approximately once a week. You will work closely with developers, DevSecOps engineers, infrastructure engineers, and test teams to embed security, compliance, and automation across our delivery lifecycle.
last updated 29 week of 2026