DevSecOps Engineer: CI/CD, Kubernetes & Cloud Security

Methods; Worcester; On-site; GBP 70,000 - 90,000; Full time

Benefits offered by this job

LinkedIn Learning

Wellness programme

Office social events

25 days leave + 10 days

Paid volunteering days

Job summary

Methods is a UK-based IT services consultancy delivering secure, end-to-end digital transformation from government to private sector clients. This role focuses on building secure, automated infrastructure, embedding security across the SDLC and enabling repeatable, auditable releases.

You will work with cross-functional teams to implement IaC, secure pipelines, and cloud/on-premise hybrid environments, while ensuring compliance and rapid delivery of trusted software solutions.

Qualifications

• Experience in DevSecOps and secure SDLC practices.
• Proven ability to design and implement secure CI/CD pipelines.
• Strong knowledge of cloud and on-premise hybrid environments.

Responsibilities

• Develop and maintain IaC with Terraform or YAML equivalents.
• Automate deployment, configuration and releases with security controls.
• Embed security throughout the SDLC and pipeline tooling.
• Manage CI/CD pipelines with security scanning and compliance checks.
• Oversee platform security, including secrets and access controls.
• Apply secure-by-design principles aligned to guidance.
• Identify risks and implement mitigations.
• Monitor infrastructure, apps and security tooling for threats.
• Collaborate with engineering, security and business teams.
• Conduct peer reviews of infrastructure and deployment code.
• Document and manage deployment risks.

Skills

DevSecOps

Terraform

Kubernetes

Docker

CI/CD pipelines

Security by design

SDLC security

Agile delivery

Cross-functional collaboration

SAST/DAST tooling

Tools

Terraform

Ansible

SonarQube

Trivy

Kubernetes

Job description

Methods is a UK-based IT services consultancy delivering secure, end-to-end digital transformation from government to private sector clients. This role focuses on building secure, automated infrastructure, embedding security across the SDLC and enabling repeatable, auditable releases.

You will work with cross-functional teams to implement IaC, secure pipelines, and cloud/on-premise hybrid environments, while ensuring compliance and rapid delivery of trusted software solutions.