DevOps Engineer

BAE Systems; Hurn; Hybrid; GBP 55,000 - 75,000; Full time

Job summary

BAE Systems is seeking a DevOps Engineer to design and implement GitLab-based CI/CD pipelines, deploying containerised services to AKS while maintaining secure Docker workflows. You will define AKS configurations, write Terraform modules, and manage secrets with Azure Key Vault and Azure AD.

The role supports hybrid working arrangements across multiple UK locations, collaborating with MLOps and Data Engineering teams to deliver reproducible infrastructure and robust monitoring using Azure

Qualifications

• Experience writing and debugging CI/CD pipelines.
• Experience building container images with Docker.
• Experience managing infrastructure lifecycle in Azure using IaC.
• Ability to collaborate across technical and non-technical teams.
• Understanding secure coding and deployment principles.
• Experience troubleshooting infrastructure deployment issues.

Responsibilities

• Designing and implementing GitLab-based CI/CD pipelines for deploying containerised services to AKS.
• Building and maintaining Dockerfiles and container image workflows.
• Defining and managing AKS cluster configurations for secure and scalable workloads.
• Writing Terraform modules for provisioning cloud infrastructure in line with Azure Landing Zone standards.
• Managing secrets, configuration, and access using Azure Key Vault and Azure AD.
• Ensuring connectivity between on-prem services and Azure cloud infrastructure using Greenlink and hybrid networking.
• Collaborating with MLOps and Data Engineers to ensure reproducible, auditable infrastructure across environments.
• Monitoring system health, logging, and metrics using platform observability tools (Azure Monitor, Prometheus, Grafana).

Skills

CI/CD pipelines

Docker

Infrastructure as Code

Security concepts

Cross-team collaboration

Tools

Terraform

Azure

AKS

Azure Monitor

Prometheus

Grafana

Job description

DescriptionJob Title: DevOps EngineerJob Location: Preston, Portsmouth, Barrow-In-Furness, Christchurch, Yeovil, Frimley or Glasgow -. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role. Salary: Circa 65,000 depending on skills and experienceWho we are:Join BAE Systems and you'll be part of something bigger. As a valued member of our global colleague network, you'll bring your unique skills and perspectives to help pioneer progress and protect what matters most. You'll be trusted to play your part in delivering the advanced, technology-led defence, aerospace and security solutions of tomorrow - shaping a safer future, for all of us. Role Description: This role focuses on designing and implementing GitLab-based CI/CD pipelines to deploy containerised services into AKS, while maintaining robust Docker image workflows and secure internal registry practices. You will define and manage AKS cluster configurations, ensure scalable workloads, and build Terraform modules aligned with Azure Landing Zone standards. Strong cloud engineering fundamentals and an automation-first mindset are essential. You will manage secrets and access through Azure Key Vault and Azure AD, support hybrid connectivity using Greenlink, and collaborate closely with MLOps and Data Engineering teams to deliver reproducible, auditable infrastructure. The role also includes monitoring system health using tools such as Azure Monitor, Prometheus, and Grafana

Core Duties:

• Designing and implementing GitLab-based CI/CD pipelines for deploying containerised services to AKS
• Building and maintaining Dockerfiles and container image workflows, pushing to internal container registries
• Defining and managing AKS cluster configurations, ensuring secure and scalable workloads
• Writing and maintaining Terraform modules for provisioning cloud infrastructure in line with Azure Landing Zone standards
• Managing secrets, configuration, and access using Azure Key Vault and Azure AD
• Ensuring connectivity between on-prem services and Azure cloud infrastructure using Greenlink and hybrid networking
• Collaborating with MLOps and Data Engineers to ensure reproducible, reliable, and auditable infrastructure across environments
• Monitoring system health, logging, and metrics using platform observability tools (e.g. Azure Monitor, Prometheus, Grafana where applicable)

Essential Skills:

• You will have experience of writing and debugging CI/CD pipelines
• Experience of building container images using Docker
• You will have experience of managing infrastructure lifecycle in Azure using IaC
• You will be able to collaborate across technical and non-technical teams
• Understanding of applying secure coding and deployment principles
• Experience of troubleshooting system and deployment issues at infrastructure level

The Shared Services Data & Analytics team:

The Shared Services Data & Analytics Team is at the heart of our company data landscape, bringing together