DevSecOps Engineer

DXC Technology Company; England; On-site; GBP 90,000 - 120,000; Full time

Job summary

DXC Technology Hampshire-based role is seeking a security specialist to implement Zero Trust across defence cloud and hybrid infrastructure. You will embed automated checks in CI/CD pipelines, enforce IAM, MFA, RBAC, ABAC and PAM, and manage secure infrastructure as code.

Strong problem-solving and communication skills are essential as you balance security with delivery needs. You will work onsite in Hampshire, engaging with multi-supplier teams to ensure compliant, auditable security practices

Qualifications

• Provide technical leadership for Zero Trust adoption across multi-supplier teams.
• Diagnose network, identity federation and security integration issues.
• Balance delivery pace with defence security requirements.
• Explain complex security issues clearly to project managers.
• Handle sensitive defence information with judgement and integrity.

Responsibilities

• Zero Trust implementation: Apply ZTA principles across defence cloud and hybrid infrastructure, covering identities, devices, networks and data.
• Pipeline security: Embed automated compliance checks, container scanning and vulnerability assessments in CI/CD pipelines.
• Identity and access: Enforce IAM, MFA, RBAC, ABAC and PAM controls.
• Infrastructure as Code: Manage secure, immutable infrastructure and network policies through controlled, repeatable code.
• Monitoring and enforcement: Use telemetry and automated controls to detect, contain and respond to anomalies.

Skills

Technical leadership

Problem-solving

Risk and governance

Communication

Discretion

Tools

Terraform

Ansible

CloudFormation

Docker

Kubernetes

Istio

Prisma Cloud

Trivy

Azure

AWS

Job description

Job Description: DXC Technology is committed to building diverse, inclusive teams. We welcome applications from all backgrounds and particularly encourage interest from women, underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone.

Location

Hampshire (onsite 5 days per week)

Due to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role, and have the right to work in the United Kingdom. Some roles may also be subject to nationality requirements where these are necessary to meet UK Government or contractual security obligations.

Key Responsibilities

• Zero Trust implementation: Apply ZTA principles across defence cloud and hybrid infrastructure, covering identities, devices, networks and data.
• Pipeline security: Embed automated compliance checks, container scanning and vulnerability assessments in CI/CD pipelines.
• Identity and access: Enforce IAM, MFA, RBAC, ABAC and PAM controls.
• Infrastructure as Code: Manage secure, immutable infrastructure and network policies through controlled, repeatable code.
• Monitoring and enforcement: Use telemetry and automated controls to detect, contain and respond to anomalies.

Core Technical Skills

• Zero Trust: NCSC and NIST frameworks, micro-segmentation, software-defined perimeters and context-aware access.
• Cloud and infrastructure security: Azure, AWS, and on-premises virtualised infrastructure.
• Infrastructure as Code: Terraform, Ansible and CloudFormation.
• Container security: Docker, Kubernetes, Istio, Prisma Cloud and Trivy.
• Networking and identity: VLANs, VPNs, proxies, firewalls, OAuth 2.0, OpenID Connect, SAML and LDAP.

What You’ll Bring

• Technical leadership: Lead Zero Trust adoption across multi-supplier teams.
• Problem-solving: Diagnose network, identity federation and security integration issues.
• Risk and governance: Balance delivery pace with defence security requirements.
• Communication: Explain complex security issues clearly to project managers.
• Discretion: Handle sensitive defence information with judgement and integrity.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We're committed to fostering an inclusive environment where everyone can thrive.

DXC Technology (NYSE: DXC) is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organizations - helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernization, and Industry-Specific Software Solutions, DXC modernizes, secures, and operates some of the world's most complex technology estates. Learn more on dxc.com.