Principal DevSecOps Engineer

Principal DevSecOps Engineer - Permanent Bristol | Hybrid - 3 days per week on-site £110,000-£125,000 + 5-10% bonus + pension + benefits | Permanent Build secure, scalable platforms that enable transformation. We're looking for a Principal DevSecOps Engineer to lead the adoption and continuous improvement of DevSecOps practices across complex technology transformation programmes. You'll combine hands-on engineering with technical leadership - embedding security, automation, governance and reliability throughout the path to live. What you'll do

• Design and continuously improve secure, automated CI/CD and GitOps pipelines<br />* Embed security scanning, vulnerability management and secrets management into delivery workflows<br />* Establish secure-by-design engineering practices and enforce security and technical standards<br />* Lead Infrastructure as Code (IaC) practices across teams and environments<br />* Drive observability, monitoring, logging and audit controls<br />* Support incident response, patching, compliance reporting and technical debt remediation<br />* Partner with developers and delivery teams to improve engineering quality and security<br />* Document security processes, controls and operational runbooks<br />* Provide technical leadership and help establish effective DevSecOps ways of working What we're looking for You'll be an experienced DevSecOps Lead or Principal Engineer with strong hands-on and leadership experience across:
• CI/CD &amp; GitOps - GitHub Actions, Argo CD, Argo Rollouts<br />* Security &amp; compliance - Trivy, vulnerability management, HashiCorp Vault, cert-manager<br />* Containers &amp; cloud - Docker, AWS EKS, AWS IAM, S3 and network policies<br />* Infrastructure as Code - Terraform<br />* Observability - Grafana, Loki<br />* Automation - Python and Bash<br />* Experience delivering within the UK Government Digital Service (GDS) lifecycle on a public sector engagement

Why join?

You'll work on complex, high-impact transformation programmes where engineering, security and technology come together. You'll have access to extensive learning and development opportunities, professional certifications and flexible hybrid working - with the opportunity to shape DevSecOps practices across a growing technology environment. Security Check (SC) clearance is required, including continuous UK residency for the last five years, alongside the relevant eligibility requirements. Important: You must be a Sole UK National for this requirement. Ready to shape the future of secure engineering? If you're a senior DevSecOps professional who enjoys solving complex technical challenges, leading from the front and building secure engineering practices that scale, we'd love to hear from you. Apply now