Azure DevOps Engineer

CBSbutler Holdings Limited trading as CBSbutler; Greater London; Remote; GBP 140,000 - 160,000; Full time

Job summary

CBSbutler Holdings Limited trading as CBSbutler is seeking a Lead DevSecOps Engineer for a major UK MOD digital transformation programme. The role focuses on secure DevSecOps practices across the MODCloud estates, spanning Azure, AWS, and OCI, with automation and governance baked into the delivery lifecycle.

You will lead cross‑functional teams, design secure CI/CD pipelines, and embed security controls across multiple products.

Qualifications

• Experience leading DevSecOps across multiple MOD/defence products.
• UK Government / GDS delivery experience.
• Strong stakeholder and communication skills.
• Experience working across distributed engineering teams.

Responsibilities

• Lead and embed DevSecOps engineering practices across MOD digital products.
• Design and govern secure CI/CD and GitOps pipelines.
• Integrate security scanning, vulnerability management and compliance controls.
• Drive Infrastructure as Code using Terraform.
• Work across Kubernetes / Docker / AWS EKS.
• Implement secrets, identity and access management (Vault).
• Establish observability, monitoring, logging and audit controls.
• Develop secure‑by‑design engineering practices aligned to MOD security requirements.
• Coordinate DevSecOps engineers, developers, testers and infra teams.
• Create and maintain security processes, technical standards and runbooks.
• Support incident response, patching, risk management and compliance activity.

Skills

DevSecOps leadership

Stakeholder communication

Public sector delivery

Tools

AWS

Kubernetes/EKS

Terraform

GitHub Actions

GitOps

Argo CD

Docker

Vault

Trivy

cert-manager

Grafana

Loki

Python

Bash

Job description

DevSecOps Engineer (MOD / MODCloud)

Rate: £645 per day inside ir35

Location: Remote

Contract 6 months+

Active SC security clearance is required for this role

We're looking for a Lead DevSecOps Engineer to take a key role on a major UK MOD digital transformation programme, working with a leading technology partner delivering secure digital products into the Defence environment.

This is a genuinely high-impact MODCloud role, spanning multiple cloud estates and products across the MOD digital landscape, you'll help engineer and govern will be deployed across the MOD digital estate (MODCloud), including:

Microsoft Azure - MODCloud ACE / i-ACE

AWS - MODCloud ICE

Oracle Cloud Infrastructure - OCI / MODCloud OCE

You'll help establish consistent, secure and automated DevSecOps practices across multiple products and engineering teams, embedding security, compliance and automation throughout the software delivery lifecycle.

Responsibilities

• Lead and embed DevSecOps engineering practices across multiple MOD digital products
• Design and govern secure CI/CD and GitOps pipelines
• Integrate security scanning, vulnerability management and compliance controls
• Drive Infrastructure as Code using Terraform
• Work across Kubernetes / Docker / AWS EKS
• Implement secrets, identity and access management using technologies such as HashiCorp Vault
• Establish observability, monitoring, logging and audit controls
• Develop secure‑by‑design engineering practices aligned to MOD security requirements
• Coordinate DevSecOps engineers, developers, testers and infrastructure teams
• Create and maintain security processes, technical standards and operational runbooks
• Support incident response, patching, risk management and compliance activity

Expereince required

You'll need strong hands-on experience across

• AWS
• Kubernetes/EKS
• Terraform
• GitHub Actions
• GitOps
• Argo CD
• Docker
• Vault
• Trivy
• cert-manager
• Grafana
• Loki
• Python
• Bash

You'll also need

• Proven DevSecOps leadership experience
• UK Government / GDS delivery experience
• Strong stakeholder and communication skills
• Experience working across distributed engineering teams