DevOps Engineer

Silicon Logic; Sheffield; On-site; GBP 90,000 - 120,000; Full time

Job summary

Silicon Logic is seeking an experienced DevSecOps/CI-CD engineer to own and evolve our Jenkins Shared Library powering multi-language builds across Java/Maven, Node/NPM, Python, Helm, Terraform, and containers.

You will design Groovy pipeline steps, extend Python tooling for SBOM and provenance, and optimize performance with caching and parallel builds. Mentorship on secure pipeline practices and incident prevention is expected.

Qualifications

• 7+ years of engineering; 3+ years in CI/CD platform or DevSecOps.
• Strong Jenkins + Groovy shared library expertise.
• Advanced Python automation (JSON/YAML processing, tooling scripts).
• Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata.
• Experience with SonarQube, Sonatype IQ, container and SAST scanning.
• Proven performance tuning (caching, parallelization, dependency pruning).
• Compliance Awareness.
• Terraform module and Helm chart publishing patterns.
• GitOps or release automation experience.

Responsibilities

• Design and maintain Groovy pipeline steps (build, test, package, scan, deploy).
• Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container).
• Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch).
• Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling).
• Refactor legacy scripts (remove global state, consolidate hashing, standardise templates).
• Document ci-config.yaml standards and usage patterns.
• Mentor engineers on secure pipeline development and supply-chain practices.
• Troubleshoot and prevent pipeline incidents.

Skills

Jenkins Groovy

Python automation

Packaging know-how

Helm & Terraform

Container metadata

Security scanning

Performance tuning

Compliance awareness

GitOps & release

Job description

Overview

Own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supplychain integrity across teams.

Responsibilities

1. 1. Design and maintain Groovy pipeline steps (build, test, package, scan, deploy).
2. 2. Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container).
3. 3. Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch).
4. 4. Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling).
5. 5. Refactor legacy scripts (remove global state, consolidate hashing, standardise templates).
6. 6. Document ci-config.yaml standards and usage patterns.
7. 7. Mentor engineers on secure pipeline development and supply-chain practices.
8. 8. Troubleshoot and prevent pipeline incidents.

Your Profile

Essential skills/knowledge/experience

1. 1. 7+ years of engineering; 3+ years in CI/CD platform or DevSecOps.
2. 2. Strong Jenkins + Groovy shared library expertise.
3. 3. Advanced Python automation (JSON/YAML processing, tooling scripts).
4. 4. Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata.
5. 5. Experience with SonarQube, Sonatype IQ, container and SAST scanning.
6. 6. Proven performance tuning (caching, parallelization, dependency pruning).
7. 7. Compliance Awareness.
8. 8. Terraform module and Helm chart publishing patterns.
9. 9. GitOps or release automation experience.

1. 1. 7+ years of engineering; 3+ years in CI/CD platform or DevSecOps.
2. 2. Strong Jenkins + Groovy shared library expertise.
3. 3. Advanced Python automation (JSON/YAML processing, tooling scripts).
4. 4. Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata.
5. 5. Experience with SonarQube, Sonatype IQ, container and SAST scanning.
6. 6. Proven performance tuning (caching, parallelization, dependency pruning).
7. 7. Compliance Awareness.
8. 8. Terraform module and Helm chart publishing patterns.
9. 9. GitOps or release automation experience.