DevSecOps Engineer

Strativ Group; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Strativ Group is partnering with a defence technology company in London to recruit a Senior DevSecOps Engineer. You will own the secure software delivery infrastructure behind autonomy programmes and operate at the intersection of software, platform engineering, cyber security, and defence systems engineering.

You will apply UK MOD Secure by Design principles, implement automated security controls in CI/CD, and collaborate with cross-disciplinary teams to ensure compliance across security

Qualifications

• Degree or equivalent practical experience in a technical field.
• Experience delivering software in UK defence or other highly regulated environments.
• Understanding of MOD/NATO DevSecOps and Secure by Design.

Responsibilities

• Design, build and operate secure development and deployment infrastructure for autonomy and defence programmes.
• Develop and maintain CI/CD pipelines for rapid, repeatable and secure delivery of autonomy and mission software.
• Embed security throughout the software development lifecycle with controls, testing, evidence and assurance built into engineering workflows.

Skills

CI/CD pipelines

Security by Design

DevSecOps

Defence sector

Secure software

Infrastructure as Code

GitLab

GitHub

Cloud & on-prem

Risk management

Testing & assurance

Education

BS or MS in Computer Science / related

Tools

Terraform

Kubernetes

Ansible

Job description

Strativ are working with an innovative defence technology company in London that are building advanced autonomous systems.

We are looking for a Senior DevSecOps Engineer to join their engineering team and own the secure software delivery infrastructure behind mission-critical autonomy programmes.

This role sits at the intersection of software engineering, platform engineering, cyber security and defence systems engineering.

We are looking for someone who has a strong software and platform engineering background with solid experience in UK defence environments. You ideally need to understand the UK MOD/NATO approach to DevSecOps, Secure by Design, cyber risk management and security assurance, and have experience delivering software into classified and operational settings.

Responsibilities:

• Designing, building and operating secure development and deployment infrastructure for autonomy and defence programmes
• Developing and maintaining CI/CD pipelines for rapid, repeatable and secure delivery of autonomy and mission software
• Embedding security throughout the software development lifecycle, with controls, testing, evidence and assurance built into engineering workflows rather than treated as a separate activity
• Applying UK MOD Secure by Design principles and helping engineering teams understand their cyber security and technical assurance responsibilities
• Working closely with software, autonomy, systems, cyber security, integration and test engineers to create development environments that support speed while meeting defence security requirements
• Designing and maintaining environments across cloud, on-premises infrastructure, labs, simulation, hardware-in-the-loop and operational platforms
• Enabling secure development and deployment across different security classifications and segmented environments
• Implementing automated security controls in CI/CD pipelines, including static analysis, dependency, container and secrets scanning, software composition analysis, vulnerability management and policy enforcement

Skills Required:

• BS or MS in Computer Science, Software Engineering, Cyber Security, Electrical Engineering, Systems Engineering or a related discipline, or equivalent practical experience
• Significant experience delivering software or digital capabilities within UK defence or another highly regulated national security environment
• Strong understanding of the UK MOD/NATO approach to DevSecOps and Secure by Design, including integrating cyber security and risk management across the capability lifecycle
• Experience applying MOD security policies, assurance processes and technical security requirements to software-intensive defence programmes
• Hands-on experience building and running CI/CD pipelines using modern source control, build, test, artefact management and deployment tooling
• Strong grasp of Infrastructure as Code, configuration management, containerisation and infrastructure automation
• Experience with Git, GitLab or GitHub, or equivalent tooling
• Experience supporting DevSecOps, software delivery or digital engineering across NATO nations or multinational defence programmes
• Familiarity with the DevSecOps approaches, security frameworks and software assurance practices of other NATO partners, particularly the US and European allies