DevOps Engineer (Contract, Outside IR35)

Hedgehog Lab; Greater London; Hybrid; GBP 92,000 - 120,000; Part time

Job summary

Hedgehog Lab is a remote-first consultancy partnering with a UK government app team. You will contribute to secure, scalable infrastructure on AWS, mainly via CloudFormation and Terraform, with a senior engineer providing guidance. You will configure Lambda, API Gateway, KMS and WAF, and help manage SigV4 authentication.

The role emphasizes careful, security-minded changes and thorough documentation. Most work is from home, with occasional London-area meetings.

Qualifications

• AWS experience in a commercial setting.
• Experience with CloudFormation or Terraform.
• Familiar with Lambda and API Gateway.
• Security-minded and able to reason about change.

Responsibilities

• Make infrastructure changes in CloudFormation and Terraform under senior review.
• Configure Lambda, API Gateway, KMS and WAF and manage SigV4 auth considerations.
• Keep documentation up to date as infrastructure evolves.
• Speak up early if something looks wrong or uncertain.

Skills

AWS

CloudFormation

Terraform

Lambda

API Gateway

Security-minded

Job description

DevOps Engineer (Contract, Outside IR35)

Contract status: Outside IR35

Start date: 2nd November

Contract length: To the end of December 2026, with extension possible

Location: Remote first

London days: Once or twice a month

Who you'll be doing it for

You'll join the mobile platform team on a UK government app, working on the app and the services that support it.

The team builds and maintains the common parts of the app, such as login. It also brings in key features built by other teams, and manages app releases.

You're engaged through hedgehog lab, a digital product consultancy and certified B Corp, also Great Place to Work certified.

For 20 years we've helped public and private sector organisations through digital transformation.

What you'll be doing

You'll make infrastructure changes in CloudFormation and Terraform, with a senior engineer reviewing what you do.

You'll help configure Lambda, API Gateway, KMS and WAF, and help look after SigV4 authentication.

You'll keep the documentation up to date as things change.

If something looks wrong, you'll say so early. If you're unsure, you'll ask.

What's in it for you

You'll learn on a real AWS environment behind a government app, with a senior engineer working next to you.

Most of it happens from home.

What you'll need to be considered

You need commercial AWS experience.

You should have working knowledge of CloudFormation or Terraform, and be familiar with Lambda and API Gateway.

You're careful and security-minded. You like to understand why something works before you change it.