Azure DevSecOps Engineer – Secure CI/CD & Cloud

Graphnet Health; Milton Keynes; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Graphnet Health is seeking a hands-on Azure DevSecOps Engineer to balance DevOps and security engineering. The role focuses on strengthening secure software delivery, cloud security posture and operational resilience within a UK-based environment.

The ideal candidate will switch between CI/CD, IaC automation and vulnerability management, with experience across AKS, App Services, API Management, Azure SQL and Key Vault. Hybrid working with monthly office attendance is expected.

Qualifications

• Hands-on Azure experience with secure design, deployment and operations of Azure PaaS.
• Proven DevOps experience building and maintaining CI/CD pipelines.
• Experience with IaC and automation using Terraform and PowerShell.

Responsibilities

• Build and improve secure CI/CD pipelines using Azure DevOps and/or GitHub Actions.
• Embed DevSecOps practices including code scanning and secret scanning.
• Identify, prioritise and remediate vulnerabilities with security teams.
• Deploy and harden Azure infrastructure using IaC and least-privilege principles.
• Support secure Azure platform design across AKS, App Services, API Management, Azure SQL and Key Vault.
• Improve security visibility with automation, dashboards and alerts.
• Contribute to threat modelling, policy-as-code and secure engineering guidance.
• Support DR/BCP testing to ensure services remain recoverable.

Skills

Azure DevSecOps

CI/CD pipelines

Infrastructure as Code

Azure DevOps

GitHub Actions

Terraform

PowerShell

AKS

Container security

Threat modelling

Education

AZ-400 / AZ-500 or equivalent

SC-200 / CISSP / CCSP beneficial

Tools

Microsoft Sentinel

Defender for Cloud

Azure Monitor

Application Insights

Cloudflare / WAF

Job description

Graphnet Health is seeking a hands-on Azure DevSecOps Engineer to balance DevOps and security engineering. The role focuses on strengthening secure software delivery, cloud security posture and operational resilience within a UK-based environment.

The ideal candidate will switch between CI/CD, IaC automation and vulnerability management, with experience across AKS, App Services, API Management, Azure SQL and Key Vault. Hybrid working with monthly office attendance is expected.