About this role
Salary: £25,000 - 50,000 per year
Requirements: 7+ years of engineering experience, including 3+ years in a CI/CD platform or DevSecOps role.Strong Jenkins and Groovy shared library expertise.Advanced Python development experience, including best coding practices, APIs, JSON/YAML processing, and tooling scripts; key projects should be demonstrated in the CV.Deep knowledge of Maven, NPM, and Python packaging, with exposure to Helm, Terraform, and container image metadata.Experience with supply-chain security concepts such as SLSA, CycloneDX SBOMs, and digests.Experience with SonarQube, Sonatype IQ, and container and SAST scanning.Proven performance tuning experience, including caching, parallelization, and dependency pruning.Compliance awareness.Nice-to-have: artifact signing and attestations experience, including cosign and OCI.Nice-to-have: Terraform module and Helm chart publishing patterns.Nice-to-have: GitOps or release automation experience.Nice-to-have: GCP or AWS cloud experience. Responsibilities: We design and maintain Groovy pipeline steps for build, test, package, scan, and deploy workflows.We extend Python tooling for SLSA provenance, SBOM generation, hash and digest accuracy, and security scan aggregation.We optimize pipeline performance through parallel builds, caching, scope-reduced BOMs, and dependency prefetch.We ensure artifact integrity through correct SHA1 and SHA256 mapping, reproducible inputs, and evidence modeling.We refactor legacy scripts by removing global state, consolidating hashing, and standardizing templates.We document ci-config.yaml standards and usage patterns.We mentor engineers on secure pipeline development and supply-chain practices.We troubleshoot and prevent pipeline incidents. Technologies: AWSCI/CDCloudDevSecOpsGCPGitOpsGroovyHelmJSONJavaJenkinsMavenNPMPythonSecurityTerraformNodeJS More:
We own and evolve our Jenkins Shared Library, powering multi-language builds across Java/Maven, Node/NPM, Python, Helm, Terraform, and containers. We deliver fast, secure, provenance-rich pipelines with SLSA, SBOMs, and digests, and we strengthen supply-chain integrity across teams. GCS is acting as an Employment Business in relation to this vacancy.
last updated 39 week of 2026