DevSecOps Engineer

Spaceflux; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Spaceflux is seeking a DevSecOps Engineer to own the security and operational integrity of the Spaceflux platform. You’ll work with the engineering team to embed security across the software delivery pipeline, cloud infrastructure, and edge devices, designing and operating CI/CD pipelines with security baked in from the start.

The role focuses on Azure cloud, IaC tooling (Terraform, Bicep), threat modelling, compliance with UK Government standards, and secure coding review practices.

Qualifications

• Strong background in cloud security, ideally on Azure, with hands-on IaC tooling experience.
• Experience building and operating secure CI/CD pipelines in production.
• Experience with UK Government security compliance frameworks (Cyber Essentials Plus, ISO 27001).

Responsibilities

• Own the security posture of the platform: threat modelling, vulnerability management, incident response.
• Design and maintain secure CI/CD pipelines, integrating SAST, DAST, dependency scanning, and container security tooling.
• Manage Azure cloud infrastructure using infrastructure-as-code, with security controls and least-privilege access.
• Lead on compliance requirements for UK Government programmes, including Cyber Essentials Plus, ISO 27001.
• Define and enforce secure coding standards and review practices with engineering teams.
• Own observability and alerting for security events across cloud and edge environments.
• Support security review processes for new features, third-party integrations, and infrastructure changes.

Skills

CI/CD security

Cloud security

IAM & secrets management

Security reviews

Code review

UK government compliance

Security incident response

Azure

Security clearance eligibility

Tools

Terraform

Bicep

Job description

Spaceflux delivers sovereign-grade optical space intelligence through a global network of optical and an AI-powered cloud platform. We provide real-time tracking, characterisation, and analytics from LEO to GEO, supporting government and commercial missions with actionable intelligence in seconds. We also deliver tailored sensor system packages, specialist services, and domain intelligence consultancy.

About the Role

We’re looking for a DevSecOps Engineer to own the security and operational integrity of the Spaceflux platform. You’ll work closely with our engineering team to embed security into every layer of our software delivery pipeline, cloud infrastructure, and edge-deployed systems. This is a hands‑on role. You’ll design and operate CI/CD pipelines with security baked in from the start, manage cloud infrastructure with a security‑first mindset, and own our compliance posture for UK Government programmes. You won’t be writing policies from a distance. The platform is cloud‑native, data‑intensive, and operationally critical. We process data from sensors on five continents, handle UK Official Sensitive material, and serve government customers who have no tolerance for downtime or data compromise.

Responsibilities

• Own the security posture of the Spaceflux platform: threat modelling, vulnerability management, penetration test remediation, and incident response.
• Design and maintain secure CI/CD pipelines, integrating SAST, DAST, dependency scanning, and container security tooling.
• Manage cloud infrastructure (Azure) using infrastructure-as-code, with security controls, secrets management, and least-privilege access enforced by default.
• Lead on compliance requirements for UK Government programmes, including Cyber Essentials Plus, ISO 27001, and defence data handling standards.
• Work with engineering to define and enforce secure coding standards and review practices.
• Own observability and alerting for security events across cloud and edge environments.
• Support security review processes for new features, third-party integrations, and infrastructure changes.

Qualifications

Strong background in cloud security, ideally on Azure, with hands‑on experience of IaC tooling (Terraform, Bicep, or equivalent).

Required Skills

• Proven experience building and operating secure CI/CD pipelines in production environments.
• Solid understanding of network security, identity and access management, and secrets management in cloud-native architectures.
• Experience supporting UK Government security compliance: Cyber Essentials Plus, DSPF, or equivalent frameworks.
• Able to work effectively with development teams: comfortable reviewing code, writing runbooks, and shipping tooling yourself.
• Sole British national, eligible for UK security clearance (at UK eyes only). This role involves working on UK Official Sensitive programmes.

Preferred Skills

• Experience with edge computing or distributed systems in operational environments.
• Familiarity with satellite systems, aerospace, or defence sectors.
• Experience with SIEM platforms and security event correlation at scale.
• Relevant certifications: AZ-500, CISSP, CISM, or similar.