DevSecOps Engineer

Methods; Gloucester; In loco; GBP 70.000 - 100.000; Tempo pieno

Vantaggi offerti da questo lavoro

LinkedIn Learning access

Management development programme

Training

Wellness - EAP

Office social events

25 days annual leave + bank holidays +

Descrizione del lavoro

Methods is a UK-based IT Services Consultancy partnering with central government departments to transform public sector delivery. We design secure, end-to-end solutions with a human-centric approach, blending people, technology and data to create value for clients and staff.

This DevSecOps role focuses on hybrid on-prem and cloud infrastructure, IaC, secure SDLC, and CI/CD automation. You will work with Security, Engineering and Architecture to deliver compliant, secure platforms and advance

Competenze

• Strong DevOps/DevSecOps experience supporting enterprise platforms.
• Experience designing and implementing hybrid on-premise and cloud solutions.
• Experience with Kubernetes, Docker and container platforms.
• Experience with Terraform, Ansible and infrastructure automation tooling.
• Experience with CI/CD pipelines and release management processes.
• Experience integrating security tooling into delivery pipelines.
• Understanding of SaaS, PaaS and IaaS service models.
• Ability to work effectively with cross-functional teams (Security & Engineering).

Mansioni

• Design, build and support secure on-premise and cloud infrastructure.
• Develop and maintain Infrastructure as Code (Terraform, YAML or equivalent).
• Automate deployment, configuration and operational processes to enable secure and repeatable releases.
• Embed security controls throughout the software development lifecycle (SDLC).
• Implement and maintain CI/CD pipelines, including security scanning and compliance checks.
• Manage platform security, including secrets, certificates, tokens and access controls.
• Apply secure-by-design principles and align solutions with NCSC guidance.
• Identify security risks and vulnerabilities and implement appropriate mitigations.
• Monitor infrastructure, applications and security tooling to detect threats and issues.
• Work with engineering, architecture, security and business teams to deliver secure solutions.
• Conduct peer reviews of infrastructure and deployment code.
• Ensure deployment risks are understood, documented and appropriately managed.
• Support regulatory and security compliance requirements.
• Experience working within Agile delivery environments.

Conoscenze

DevSecOps

Hybrid on-prem/cloud

Kubernetes

Docker

Terraform

CI/CD pipelines

Security tooling

Cross-functional collaboration

Agile delivery

Strumenti

Kubernetes

Docker

Terraform

Ansible

CI/CD tooling

SonarQube

Trivy

Descrizione del lavoro

Methods is a £100M+ IT Services Consultancy who has partnered with a range of central government departments and agencies to transform the way the public sector operates in the UK. Established over 30 years ago and UK-based, we apply our skills in transformation, delivery, and collaboration from across the Methods Group, to create end-to-end business and technical solutions that are people-centred, safe, and designed for the future.

Our human touch sets us apart from other consultancies, system integrators and software houses - with people, technology, and data at the heart of who we are, we believe in creating value and sustainability through everything we do for our clients, staff, communities, and the planet.

We support our clients in the success of their projects while working collaboratively to share skill sets and solve problems. At Methods we have fun while working hard; we are not afraid of making mistakes and learning from them.

Predominantly focused on the public-sector, Methods is now building a significant private sector client portfolio.

Methods was acquired by the Alten Group in early 2022.

Requirements

• Design, build and support secure on-premise and cloud infrastructure
• Develop and maintain Infrastructure as Code (Terraform, YAML or equivalent)
• Automate deployment, configuration and operational processes to enable secure and repeatable releases
• Embed security controls throughout the software development lifecycle (SDLC)
• Implement and maintain CI/CD pipelines, including security scanning and compliance checks
• Manage platform security, including secrets, certificates, tokens and access controls
• Apply secure-by-design principles and align solutions with NCSC guidance
• Identify security risks and vulnerabilities and implement appropriate mitigations
• Monitor infrastructure, applications and security tooling to detect threats and issues
• Work with engineering, architecture, security and business teams to deliver secure solutions
• Conduct peer reviews of infrastructure and deployment code
• Ensure deployment risks are understood, documented and appropriately managed
• Support regulatory and security compliance requirements
• Experience working within Agile delivery environments

Ideal Candidate

• Strong DevOps/DevSecOps experience supporting enterprise platforms
• Experience designing and implementing hybrid on-premise and cloud solutions
• Strong understanding of infrastructure, networking and platform security
• Experience with Kubernetes, Docker and container platforms
• Experience with Terraform, Ansible and infrastructure automation tooling
• Experience with CI/CD pipelines and release management processes
• Experience integrating security tooling into delivery pipelines
• Understanding of SaaS, PaaS and IaaS service models
• Ability to work effectively with cross-functional teams, particularly Security and Engineering

Desirable Skills & Experience

• Experience supporting and troubleshooting live production environments
• Experience working within multidisciplinary delivery teams
• Experience deploying and managing infrastructure using Terraform
• Experience building and deploying containerised applications
• Experience implementing application and infrastructure monitoring solutions
• Experience with SAST, DAST and software supply chain security tooling (e.g. SonarQube, Trivy)
• Experience with on-premises DevOps toolchains and platforms

This role will require you to have or be willing to go through Security Clearance. As part of the onboarding process candidates will be asked to complete a Baseline Personnel Security Standard; details of the evidence required to apply may be found on the government website Gov.UK. If you are unable to meet this and any associated criteria, then your employment may be delayed, or rejected.

Benefits

Methods is passionate about its people; we want our colleagues to develop the things they are good at and enjoy.

By joining us you can expect

• Autonomy to develop and grow your skills and experience
• Be part of exciting project work that is making a difference in society
• Strong, inspiring and thought-provoking leadership
• A supportive and collaborative environment

• Development - access to LinkedIn Learning, a management development programme, and training
• Wellness - 24/7 confidential employee assistance programme
• Social - office parties, breakfast Tuesdays, monthly pizza Thursdays, Thirsty Thursdays, and commitment to charitable causes
• Time Off - 25 days of annual leave a year, plus bank holidays, with the option to buy 10 extra days each year
• Volunteering - 2 paid days per year to volunteer in our local communities or within a charity organisation
• Pension - Salary Exchange Scheme with 4% employer contribution and 5% employee contribution
• Life Assurance - of 4 times base salary
• Private Medical Insurance - which is non-contributory (spouse and dependants included)
• Worldwide Travel Insurance - which is non-contributory (spouse and dependants included)
• Enhanced Maternity and Paternity Pay
• Travel - season ticket loan, cycle to work scheme

For a full list of benefits please visit our website (www.methods.co.uk/careers/benefits)