DevOps Engineer (Security focus)

Allwyn UK; Watford; On-site; GBP 60,000 - 80,000; Full time

Benefits offered by this job

Company Bonus Scheme

Matched pension contributions up to 8.5%

26 days annual leave + 2 Life Days

Single Private Health Cover

Complimentary Private Medical

Income Protection

Flexible Benefits

Enhanced Family Leave

Job summary

Allwyn UK in Watford is seeking a DevOps Engineer to prioritize and resolve security defects across cloud platforms. This role requires 3-5+ years in DevOps, a strong background in automation, and expertise in AWS and Azure security principles.

The successful candidate will work closely with teams to ensure secure infrastructures and delivery pipelines and embed security practices into engineering standards. Attractive benefits, including bonus schemes and health cover, are included.

Qualifications

• 3-5+ years hands-on experience in DevOps, platform engineering or DevSecOps role.
• Strong development background to build automation and tooling for security remediation.
• Deep understanding of cloud security principles and container security in AWS and Azure.

Responsibilities

• Monitor, triage and remediate vulnerabilities across applications and cloud workloads.
• Integrate security tooling into CI/CD pipelines, including container and secret scanning.
• Implement and maintain cloud security configurations such as IAM and WAF security groups.

Skills

DevOps

Terraform

AWS

Azure

CI/CD

Vulnerability management

Job description

A bit about the role

As Allwyn transitions most of its technology services from on‑premise into a multi‑cloud environment, Cloud Security becomes critically important to ensure our core services and gaming platforms are safe.

The DevOps Engineer is the dedicated DevOps specialist focused on prioritising and resolving security defects and vulnerabilities across cloud platforms and application pipelines.

The role acts as the technical bridge between Cloud Engineering and the Security Operation Centre (SOC), Enterprise Security and Cyber Defence teams. The DevOps Engineer ensures that cloud infrastructure and delivery pipelines in AWS and Azure are Secure by Design, automating remediation where possible and embedding security controls into infrastructure as code (IaC) and CI/CD pipelines. You will champion secure engineering practices ensuring both speed of delivery and robust security posture across all environments.

What you’ll be doing

• Monitor, triage and remediate vulnerabilities across applications, cloud workloads, containers, CI/CD pipelines and IaC repositories
• Work closely with SOC, Enterprise Security and Cyber Defence teams to respond to active and emerging threats ensuring rapid technical remediation
• Integrate security tooling into CI/CD pipelines including container scanning and secret scanning
• Maintain and improve IaC security posture using Terraform and ensure compliance with security baselines and guardrails
• Automate security checks and enforcement using policy as code, security scanners and cloud native services
• Support threat modelling and secure solution design with engineering teams
• Own vulnerability management workflows and ensure timely remediation in line with risk and audit expectations
• Implement and maintain cloud security configurations (IAM, key management, WAF security groups, logging and monitoring)
• Produce technical documentation, runbooks and remediation guidance for engineering teams
• Work with product and engineering teams to embed security into development standards
• Create and enforce governance policies

What experience we’re looking for

• 3-5+ years hands‑on experience in DevOps, platform engineering or DevSecOps role
• Strong development background with the ability to build automation and tooling for security remediation
• Strong infrastructure as code experience using Terraform across AWS and Azure
• Deep understanding of cloud security principles, identity and access controls, network security and container security in AWS and Azure
• Experience integrating and managing security controls
• Solid understanding of CI/CD pipelines including GitHub Actions
• Practical experience with vulnerability management, threat remediation and working with the Security Operating Centre and Cyber teams
• Strong understanding of modern application architectures
• Demonstrated ability to keep up with rapidly evolving cloud technologies

Key Measures of Success

• Reduction in critical and high‑risk vulnerabilities within agreed SLAs, cloud and application environments
• Improved security posture as measured by cloud security benchmarks, IaC scanning results and automated policy compliance
• Effective collaboration and faster incident response with SOC, Enterprise Security and Cyber Defence teams
• Automation coverage increased, reducing manual remediation effort and improving consistency
• Secure pipelines, evidence by adoption of scanning tools and zero high or critical findings reaching production
• Positive feedback from engineering teams regarding clarity, support and quality of security guidance
• Audit and compliance targets met with no major findings related to DevOps or Cloud security practices

Benefits

• Company Bonus Scheme
• Matched pension contributions up to 8.5%
• 26 days annual leave + 2 Life Days (and bank holidays)
• Single Private Health Cover
• Complimentary Private Medical
• Income Protection
• Flexible Benefits - EV Scheme, Money Coach, Will Writing, Mortgage Advice, Dental and Eye Care Schemes
• Enhanced Family Leave (Maternity, Paternity, Adoption)

EEO Statement

We are a Disability Confident Leader which means we've taken proactive steps to ensure our workplace is accessible and inclusive for disabled and neurodivergent colleagues and candidates. As part of this we offer an interview to disabled applicants who meet the essential requirements of the job.