Senior DevSecOps Engineer

Senior DevSecOps Engineer

Reading (Hybrid working available)

Active SC Clearance required

Up to £71 p/h Inside IR35

We're looking for an experienced security cleared Senior DevSecOps Engineer to play a key role in delivering secure digital platforms for high-profile Defence and Aerospace programmes. You'll lead the integration of security, automation and cloud engineering best practices, ensuring security is embedded throughout the software development lifecycle.

As the Senior DevSecOps Engineer, you will:

• Lead the design and implementation of secure DevSecOps platforms and toolchains
• Embed automated security controls into CI/CD pipelines
• Develop secure Infrastructure as Code (Terraform, Bicep, ARM, Ansible)
• Design secure Azure, AWS and hybrid cloud environments
• Implement vulnerability management, security monitoring and automated compliance
• Support threat modelling, security architecture reviews and risk assessments
• Drive adoption of Secure Software Development Lifecycle (SSDLC) best practice
• Implement container and Kubernetes security across enterprise platforms
• Continuously improve automation, platform resilience and operational security

Key Skills

• Active SC Clearance
• Strong Defence, MOD or Aerospace experience
• Extensive experience in DevSecOps, DevOps, Platform Engineering or Cloud Security
• Extensive experience building secure CI/CD pipelines using Azure DevOps, GitHub Actions, GitLab CI/CD or Jenkins
• Strong Azure and/or AWS security experience
• Hands-on Infrastructure as Code experience (Terraform, Bicep, ARM Templates or Ansible)
• Experience securing Kubernetes and containerised environments
• Knowledge of Zero Trust Architecture, IAM, RBAC and Privileged Access Management (PAM)
• Experience implementing SAST, DAST, SCA, container scanning and secrets management
• Strong scripting skills with PowerShell, Python or Bash
• Experience with SIEM, SOAR, logging and observability platforms
• Good understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials Plus
• CISSP, CCSP, Security+, CEH, CKS, CKA or similar certifications

Please note: Active SC Clearance is essential for this position, along with previous experience working within the UK Defence or Aerospace sector. The role is based in Reading with hybrid working available.