I am recruiting for a Lead DevSecOps Engineer to work on a hybrid basis - 2/3 days in a local office, remaining time remote. The client has a number of offices across the UK.

The role falls inside IR35 so you will have to work through an umbrella company.

Recent Central Government experience is essential.

Strong hands-on expertise in DevSecOps practices, particularly security automation in CI/CD and infrastructure-as-code pipelines.

Deep understanding of modern DevOps tooling (e.g., GitHub Actions/ CircleCI, Terraform, Kubernetes, Docker) with secure configurations.

Experience implementing security controls in cloud-native environments (e.g., AWS or Azure) including IAM, network policies, and container security.

Proven track record of using tools such as Snyk, Trivy, Checkov, OPA/Gatekeeper/ OWASP ZAP, or similar to enforce pipeline and platform security.

You will have the ability to lead and mentor teams on secure coding, threat modelling, and secure architecture patterns.

Please apply ASAP to find out more.