DevSecOps Engineer

Job summary

The DevSecOps Engineer secures defence cloud and hybrid infrastructure by applying Zero Trust principles across identities, devices, networks and data. The role embeds compliance checks and vulnerability scanning in CI/CD pipelines, enforces identity and access controls, and manages secure infrastructure through code. It also uses telemetry to detect and respond to anomalies across environments that include Azure, AWS and on-premises virtualised infrastructure.

Qualifications

• Knowledge of NCSC and NIST frameworks, micro-segmentation, software-defined perimeters and context-aware access
• Experience with Azure, AWS and on-premises virtualised infrastructure
• Knowledge of Terraform, Ansible and CloudFormation
• Knowledge of Docker, Kubernetes, Istio, Prisma Cloud and Trivy
• Knowledge of VLANs, VPNs, proxies, firewalls, OAuth 2.0, OpenID Connect, SAML and LDAP

Responsibilities

• Apply Zero Trust principles across defence cloud and hybrid infrastructure, including identities, devices, networks and data
• Embed automated compliance checks, container scanning and vulnerability assessments in CI/CD pipelines
• Enforce identity and access controls, including IAM, MFA, RBAC, ABAC and PAM
• Manage secure, immutable infrastructure and network policies through controlled, repeatable code
• Use telemetry and automated controls to detect, contain and respond to anomalies

Skills

Work schedule

Industry

Relocation