Devsecops Engineer

Motorola Solutions; Cambourne; On-site; GBP 65,000 - 90,000; Full time

Job summary

Motorola Solutions UK Limited is seeking a skilled DevSecOps/Platform Engineer to build and maintain CI/CD pipelines across Linux, Windows, and web platforms. You’ll implement automated security testing, triage CVEs, and harden product images to meet regulatory standards.

You will collaborate with development teams to ensure secure, repeatable releases, manage build infrastructure, and contribute to system certification through runbooks and security documentation.

Qualifications

• Three or more years in a DevOps, DevSecOps, build/release or platform engineering role, or equivalent CI/CD-focused software engineering experience.
• Strong hands-on Linux administration and security hardening (Ubuntu/Debian).
• Hands-on CI/CD experience with GitLab CI, TeamCity, Jenkins, or GitHub Actions.
• Proficiency in Python and Bash for automation, with version control (Git).
• Docker: writing Dockerfiles, managing images and registries, and running container builds.
• Security fundamentals in a development pipeline (SAST/DSA/SCA) and vulnerability management.
• Methodical problem solving across build, infra and security issues.
• Clear written and verbal communication, able to own tasks end-to-end.

Responsibilities

• Build, maintain and improve automated pipelines across embedded Linux, Windows desktop, web, and firmware products.
• Implement automated security testing within pipelines, including SAST, SCA, DAST, SBOM generation, with quality gates.
• Triage CVEs, assess impact, and support regular security patch releases.
• Hardening Linux-based product images and servers to meet customer/regulatory standards.
• Maintain and secure the build estate, GitLab, TeamCity, agents, and internal mirrors.
• Protect build and release integrity through dependency pinning, trusted mirrors, and secret management.
• Review changes from other engineers to ensure alignment with security standards.
• Write runbooks and security documentation to support system certification.

Skills

DevOps

DevSecOps

CI/CD pipelines

Linux administration

Shell scripting

Python

Bash

Docker

Security tooling

Collaboration

Tools

GitLab CI

TeamCity

Jenkins

GitHub Actions

Terraform

Ansible

AWS

Proxmox/VMware

Job description

Job Description

Duties and Responsibilities

• CI/CD Pipelines: Build, maintain and improve the automated pipelines (GitLab CI and TeamCity) that build, test, scan, package and release CRFS software across our embedded Linux, Windows desktop, web and firmware products.
• Security Scanning: Implement and operate automated security testing within those pipelines, including static analysis (SAST), dependency analysis (SCA), secret detection, dynamic testing (DAST), vulnerability scanning and SBOM generation, with quality gates and clear, consolidated reporting.
• Vulnerability Management: Triage scanner findings and newly published CVEs with the development teams, assess their real impact on our products, track remediation through to release, and support regular security patch releases.
• Compliance & Hardening: Help CRFS meet customer and regulatory security requirements (e.g. NIST SP 800-53, DISA STIGs, FIPS 140) by hardening our Linux-based product images and servers, and producing the repeatable scan results and technical evidence needed for system certification.
• Build Infrastructure: Maintain and secure the build estate, including self-managed GitLab and TeamCity, Linux and Windows build agents, virtualized and cloud infrastructure, and internal package mirrors, using infrastructure-as-code where practical.
• Supply Chain Security: Protect the integrity of what we ship through dependency pinning and vetting, trusted internal mirrors, artifact and release signing, access reviews, and careful management of secrets, keys and tokens.
• Code Review: Review pipeline, infrastructure and application changes written by other engineers, providing constructive feedback and ensuring alignment with security standards.
• Documentation: Write clear runbooks, developer guides and security documentation to support system certification, in line with the CRFS Quality Management System.

Basic Requirements

• Relevant Experience: Three or more years in a DevOps, DevSecOps, build/release or platform engineering role, or equivalent CI/CD-focused software engineering experience.
• Linux: Strong hands-on experience administering and securing Linux systems (Ubuntu/Debian), including shell scripting and networking fundamentals.
• CI/CD: Practical experience building and maintaining pipelines in GitLab CI, TeamCity, Jenkins, GitHub Actions or similar.
• Automation: Proficiency in Python and Bash for automation and tooling, with a commitment to clean, maintainable code under version control (Git).
• Containers: Working knowledge of Docker, including writing Dockerfiles, managing images and registries, and running builds in containers.
• Security Fundamentals: Hands-on exposure to security tooling in a development pipeline (e.g. SAST, dependency or vulnerability scanning), the ability to interpret a CVE and judge its real impact, and a sound grasp of least privilege, secrets management and patching.
• Problem Solving: A methodical approach to diagnosing build, infrastructure and security problems across unfamiliar codebases and systems.
• Collaboration: Clear written and verbal communication, able to explain security findings constructively and to own assigned work through to completion.

Highly Desirable

• Regulated Environments: Experience working to security standards such as NIST SP 800-53 / RMF, DISA STIGs, CIS Benchmarks, FIPS 140, ISO 27001 or Cyber Essentials Plus, ideally in defense, aerospace or another regulated sector.
• Security Tooling: Experience with tools such as OWASP ZAP, OWASP Dependency-Check, Trivy, Semgrep, SonarQube, Nessus or OpenSCAP, and with SBOM formats (CycloneDX, SPDX).
• Infrastructure: Experience with Terraform or Ansible, virtualization platforms (e.g. Proxmox, VMware), self-hosted CI runners and AWS.
• Windows Build Environments: Experience with Windows build agents and PowerShell automation, including .NET/NuGet builds, code signing and installers.

Desirable Skills

• Academic Background: A science or engineering degree in Computer Science, Electronics, or a similar field, or equivalent practical experience.
• Build Systems: Familiarity with building C/C++ (CMake), Rust (Cargo), .NET and JavaScript/TypeScript projects on Linux and Windows; enough to debug a failing build and interpret scanner findings.
• Embedded Linux: Exposure to embedded Linux delivery, such as Debian or Alpine packaging, root filesystem and image builds, cross-compilation and kernel modules.
• Domain Interest: An interest in RF, signal processing or spectrum monitoring.

Travel Requirements

None

Relocation Provided

None

Position Type

Experienced

Referral Payment Plan

Yes

Company

Motorola Solutions UK Limited

EEO Statement

Motorola Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion or belief, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other legally-protected characteristic.

We are proud of our people-first and community-focused culture, empowering every Motorolan to be their most authentic self and to do their best work to deliver on the promise of a safer world. If you’d like to join our team but feel that you don’t quite meet all of the preferred skills, we’d still love to hear why you think you’d be a great addition to our team.