Azure Security DevSecOps Engineer – Govt-Grade Platform

Spaceflux; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Spaceflux is seeking a DevSecOps Engineer to own the security and operational integrity of the Spaceflux platform. You’ll work with the engineering team to embed security across the software delivery pipeline, cloud infrastructure, and edge devices, designing and operating CI/CD pipelines with security baked in from the start.

The role focuses on Azure cloud, IaC tooling (Terraform, Bicep), threat modelling, compliance with UK Government standards, and secure coding review practices.

Qualifications

• Strong background in cloud security, ideally on Azure, with hands-on IaC tooling experience.
• Experience building and operating secure CI/CD pipelines in production.
• Experience with UK Government security compliance frameworks (Cyber Essentials Plus, ISO 27001).

Responsibilities

• Own the security posture of the platform: threat modelling, vulnerability management, incident response.
• Design and maintain secure CI/CD pipelines, integrating SAST, DAST, dependency scanning, and container security tooling.
• Manage Azure cloud infrastructure using infrastructure-as-code, with security controls and least-privilege access.
• Lead on compliance requirements for UK Government programmes, including Cyber Essentials Plus, ISO 27001.
• Define and enforce secure coding standards and review practices with engineering teams.
• Own observability and alerting for security events across cloud and edge environments.
• Support security review processes for new features, third-party integrations, and infrastructure changes.

Skills

CI/CD security

Cloud security

IAM & secrets management

Security reviews

Code review

UK government compliance

Security incident response

Azure

Security clearance eligibility

Tools

Terraform

Bicep

Job description

Spaceflux is seeking a DevSecOps Engineer to own the security and operational integrity of the Spaceflux platform. You’ll work with the engineering team to embed security across the software delivery pipeline, cloud infrastructure, and edge devices, designing and operating CI/CD pipelines with security baked in from the start.

The role focuses on Azure cloud, IaC tooling (Terraform, Bicep), threat modelling, compliance with UK Government standards, and secure coding review practices.