Senior DevSecOps Engineer

You will design, build, secure, and operate software delivery infrastructure and CI/CD pipelines. You will embed security controls and assurance into engineering workflows, support development across classified environments, automate security checks, and apply UK MOD Secure by Design principles.

Responsibilities

• Design, build, and operate secure development and deployment infrastructure
• Develop and maintain secure CI/CD pipelines
• Embed security controls, testing, evidence, and assurance throughout the software development lifecycle
• Apply UK MOD Secure by Design principles and support cyber-security and technical-assurance responsibilities
• Establish development environments that meet defence security requirements
• Maintain cloud, on-premises, laboratory, simulation, hardware-in-the-loop, and operational environments
• Enable secure development and deployment across security classifications and segmented environments
• Implement automated static analysis, dependency scanning, container scanning, secrets detection, software composition analysis, vulnerability management, and policy enforcement
• Champion ownership of security, reliability, deployability, and operational performance

Requirements

• BS or MS in a relevant technical discipline or equivalent practical experience
• 5+ years of DevOps, DevSecOps, platform engineering, site reliability engineering, software engineering, or related experience
• Experience delivering software or digital capabilities in UK defence or a highly regulated national-security environment
• Understanding of UK Ministry of Defence and NATO DevSecOps and Secure by Design approaches
• Experience applying MOD security policies, security assurance processes, and technical security requirements
• Experience developing and operating CI/CD pipelines
• Understanding of infrastructure as code, configuration management, containerisation, and infrastructure automation
• Experience with Git, GitLab, GitHub, or equivalent tooling