DevOps Engineer

Synergize Consulting; Reading; Hybrid; GBP 50,971 - 85,411; Full time

Job summary

Synergize Consulting in Reading is seeking an experienced DevSecOps Engineer to embed security across the SDLC, building secure CI/CD pipelines and cloud-native platforms.

This role requires active SC clearance and hands-on work with Azure/AWS, Terraform, and container security within regulated defence environments. Hybrid working with onsite presence in Reading.

Qualifications

• 5+ years in DevSecOps, DevOps or Cloud Engineering.
• Hands-on with CI/CD pipelines across Azure/AWS/GCP.
• Experience with SAST/DAST/SCA and container security.
• Experience implementing IaC with Terraform, Bicep, CloudFormation or Ansible.
• Active SC Clearance and defence/regulated environment preferred.

Responsibilities

• Design, build and maintain secure CI/CD pipelines with integrated security controls.
• Embed automated security testing throughout the software delivery lifecycle.
• Develop and maintain secure IaC solutions.
• Support secure cloud adoption across Azure, AWS and hybrid environments.
• Implement automated vulnerability scanning and remediation processes.
• Monitor applications, infrastructure and cloud environments for security threats.
• Collaborate with development and cyber teams to embed security by design.
• Assist incident response, threat detection and security investigations.
• Establish monitoring, logging and alerting for security events.
• Conduct application and infrastructure security reviews and risk assessments.
• Promote automation and secure engineering best practices.

Skills

DevSecOps

SSDLC

CI/CD pipelines

IaC

Cloud security

Kubernetes security

IAM & privileged access

Vulnerability management

Python / scripting

Security testing tools

Job description

Reading Hybrid Working (4 days a week onsite)

Active SC Clearance Required

Up to £62 p/h Inside IR35

Are you an experienced security cleared SecDevOps Engineer looking to work on secure, cloud-native platforms supporting critical national programmes?

We're looking for a security-focused engineer to help embed security throughout the software development lifecycle, ensuring applications and infrastructure are secure, resilient and compliant. You'll work alongside software engineers, platform teams, architects and cyber specialists to deliver secure automation, cloud security and modern DevSecOps practices across enterprise environments.

As a DevSecOps Engineer, you'll design, build and maintain secure CI/CD pipelines, implement Infrastructure as Code, automate security testing, and help protect cloud platforms from evolving cyber threats.

You’ll play a key role in integrating security into every stage of software delivery while supporting secure cloud adoption, vulnerability management and operational resilience.

Key Responsibilities

• Design, implement and maintain secure CI/CD pipelines with integrated security controls.
• Embed automated security testing throughout the software delivery lifecycle.
• Develop and maintain secure Infrastructure as Code (IaC) solutions.
• Support secure cloud adoption across Azure, AWS and hybrid environments.
• Implement automated vulnerability scanning and remediation processes.
• Monitor applications, infrastructure and cloud environments for security threats.
• Work closely with development, platform and cyber security teams to embed security by design.
• Support incident response, threat detection and security investigations.
• Implement monitoring, logging and alerting solutions.
• Conduct application and infrastructure security reviews and risk assessments.
• Promote automation, continuous improvement and secure engineering best practices.
• Active SC Clearance.
• 5+ years' experience within DevSecOps, DevOps or Cloud Engineering
• Strong understanding of Secure Software Development Lifecycle (SSDLC).
• Experience building CI/CD pipelines using Azure DevOps, GitHub Actions, GitLab CI/CD or Jenkins.
• Hands-on experience with Infrastructure as Code using Terraform, Bicep, CloudFormation or Ansible.
• Experience implementing SAST, DAST, Software Composition Analysis (SCA), container security and secrets management tools.
• Strong knowledge of cloud security across Azure, AWS or Google Cloud.
• Experience securing Kubernetes and containerised environments.
• Good understanding of Identity & Access Management (IAM), authentication and privileged access management.
• Experience managing vulnerability assessments, remediation and compliance activities.
• Strong scripting skills using Python, PowerShell, Bash or similar.
• Experience with monitoring, logging and security alerting platforms.

Please note: Applicants must hold active SC Clearance and have experience working within Defence, Aerospace or another highly regulated environment. Hybrid working is available, with regular attendance required at the Reading office.