Jobs / Allwyn UK
DevSecOps Engineer
Allwyn UK · Watford, ENG, United Kingdom
Watford, ENG, United KingdomExp: 3-5 yrsOnsite
Remuneration
Not specified
Location
Watford, ENG, United Kingdom
Visa sponsorship
Not specified
Job summary
The DevOps Engineer secures cloud infrastructure and software delivery as services transition to a multi-cloud environment. The role monitors and remediates vulnerabilities, partners with security and engineering teams on threat response, and embeds automated controls into AWS and Azure infrastructure as code and CI/CD pipelines using Terraform, GitHub Actions, policy as code, and cloud-native services.
Benefits
Company bonus schemeMatched pension contributions up to 8.5%26 days annual leave, two Life Days, and bank holidaysPrivate health coverIncome protectionFlexible benefits, including an electric vehicle scheme, financial advice, dentaEnhanced family leave500 wellness allowanceEmployee assistance programmeDiscounted health assessmentsVolunteering daysMatched funding
Qualifications
- Three to five or more years of hands-on experience in DevOps, platform engineering, or DevSecOps
- Development experience building security automation and remediation tools
- Infrastructure-as-code experience with Terraform across AWS and Azure
- Knowledge of cloud security, identity and access controls, network security, and container security
- Experience integrating and managing security controls
- Understanding of CI/CD pipelines, including GitHub Actions
- Experience with vulnerability management, threat remediation, and security or cyber teams
- Understanding of modern application architectures
- Ability to keep up with evolving cloud technologies
Responsibilities
- Monitor, triage, and remediate vulnerabilities across applications, cloud workloads, containers, CI/CD pipelines, and infrastructure-as-code repositories
- Coordinate with security operations, enterprise security, and cyber defence teams to remediate active and emerging threats
- Integrate container scanning and secret scanning into CI/CD pipelines
- Improve Terraform security posture and maintain compliance with security baselines and guardrails
- Automate security checks and enforcement using policy as code, security scanners, and cloud-native services
- Support threat modelling and secure solution design
- Manage vulnerability workflows and timely remediation in line with risk and audit expectations
- Maintain cloud security configurations, including IAM, key management, WAF, security groups, logging, and monitoring
- Produce technical documentation, runbooks, and remediation guidance
- Embed security in product and engineering development standards
- Create and enforce governance policies
Skills
AWSAzureGitHubGitHub ActionsIAMTerraform
Industry
Lottery
Relocation
No