DevOps Engineer

BAE Systems; Frimley; On-site; GBP 65,000 - 70,000; Full time

Job summary

BAE Systems in the United Kingdom is seeking a cloud/DevOps engineer to design and implement GitLab-based CI/CD pipelines deploying containerised services to AKS. You will build Docker image workflows, maintain internal registries, and define secure, scalable AKS configurations.

You will write Terraform modules aligned with Azure Landing Zone standards, manage secrets with Azure Key Vault and Azure AD, support hybrid connectivity with Greenlink, and collaborate with MLOps and Data Engineering

Qualifications

• Proficiency in building and maintaining CI/CD pipelines.
• Hands-on experience with container images and Docker workflows.
• Experience provisioning cloud infrastructure with IaC (Terraform/Azure).

Responsibilities

• Designing and implementing GitLab-based CI/CD pipelines for deploying containerised services to AKS.
• Building and maintaining Dockerfiles and container image workflows, pushing to internal registries.
• Defining and managing AKS cluster configurations, ensuring secure and scalable workloads.
• Writing and maintaining Terraform modules for provisioning cloud infrastructure in line with Azure Landing Zone standards.
• Managing secrets, configuration, and access using Azure Key Vault and Azure AD.
• Ensuring connectivity between on-prem services and Azure cloud infrastructure using Greenlink and hybrid networking.
• Collaborating with MLOps and Data Engineers to ensure reproducible, reliable, and auditable infrastructure across environments.
• Monitoring system health, logging, and metrics using platform observability tools (Azure Monitor, Prometheus, Grafana).

Skills

GitLab CI/CD

Docker

AKS

Terraform

Azure

CI/CD pipelines

Security best practices

Tools

Terraform

Azure Kubernetes Service (AKS)

Azure Key Vault

Azure AD

Prometheus

Grafana

Azure Monitor

Greenlink

Job description

This role focuses on designing and implementing GitLab-based CI/CD pipelines to deploy containerised services into AKS, while maintaining robust Docker image workflows and secure internal registry practices. You will define and manage AKS cluster configurations, ensure scalable workloads, and build Terraform modules aligned with Azure Landing Zone standards. Strong cloud engineering fundamentals and an automation-first mindset are essential. You will manage secrets and access through Azure Key Vault and Azure AD, support hybrid connectivity using Greenlink, and collaborate closely with MLOps and Data Engineering teams to deliver reproducible, auditable infrastructure. The role also includes monitoring system health using tools such as Azure Monitor, Prometheus, and Grafana. Core Duties:

• Designing and implementing GitLab-based CI/CD pipelines for deploying containerised services to AKS
• Building and maintaining Dockerfiles and container image workflows, pushing to internal container registries
• Defining and managing AKS cluster configurations, ensuring secure and scalable workloads
• Writing and maintaining Terraform modules for provisioning cloud infrastructure in line with Azure Landing Zone standards
• Managing secrets, configuration, and access using Azure Key Vault and Azure AD
• Ensuring connectivity between on-prem services and Azure cloud infrastructure using Greenlink and hybrid networking
• Collaborating with MLOps and Data Engineers to ensure reproducible, reliable, and auditable infrastructure across environments
• Monitoring system health, logging, and metrics using platform observability tools (e.g. Azure Monitor, Prometheus, Grafana where applicable)
• You will have experience of writing and debugging CI/CD pipelines
• Experience of building container images using Docker
• You will have experience of managing infrastructure lifecycle in Azure using IaC
• You will be able to collaborate across technical and non-technical teams
• Understanding of applying secure coding and deployment principles
• Experience of troubleshooting system and deployment issues at infrastructure level

Join BAE Systems and you'll be part of something bigger. As a valued member of our global colleague network, you'll bring your unique skills and perspectives to help pioneer progress and protect what matters most. You'll be trusted to play your part in delivering the advanced, technology-led defence, aerospace and security solutions of tomorrow - shaping a safer future, for all of us. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks. Salary: Circa £65,000 depending on skills and experience