DevSecOps Engineer: Cloud Security & Automation

Matthey; England; On-site; GBP 37,000 - 46,000; Full time

Benefits offered by this job

Competitive Annual Incentive Plan

Employee Assistance Program (Assist)

Paid Volunteering opportunities

Employee recognition programme

Wellbeing programs and campaigns

Job summary

Johnson Matthey welcomes a SecDevOps Engineer to embed security into cloud platforms, CI/CD pipelines and delivery processes. You will automate provisioning, deployments and monitoring while building reusable tooling and guardrails to raise reliability and efficiency.

You’ll partner with engineering, platform and security teams to remediate vulnerabilities throughout the SDLC. You’ll implement automated security testing, secrets management and policy enforcement, and support incident analysis to

Qualifications

• Experience in DevOps/SecDevOps in cloud/platform or software environments.
• Hands-on with Infrastructure as Code tools (Terraform, Bicep, CloudFormation).
• CI/CD pipelines with integrated automated security controls.
• Scripting in Python, PowerShell, Go or Bash; Kubernetes/Helm; GitOps.

Responsibilities

• Embed security, compliance and resilience controls into cloud platforms and pipelines.
• Automate infrastructure provisioning, deployments, monitoring and operations.
• Develop reusable tooling, templates and AI-assisted guardrails.
• Collaborate with engineering, platform and security teams to remediate vulnerabilities.
• Implement automated security testing, secrets management and policy enforcement.
• Support incident response and continuous improvement for resilience.

Skills

DevOps

SecDevOps

Cloud

Platform engineering

Software engineering

Terraform

Bicep

CloudFormation

CI/CD pipelines

Python

PowerShell

Go

Bash

Kubernetes

Helm

GitOps

Security frameworks

Vulnerability management

Tools

Terraform

Bicep

CloudFormation

CI/CD platforms

Job description

Johnson Matthey welcomes a SecDevOps Engineer to embed security into cloud platforms, CI/CD pipelines and delivery processes. You will automate provisioning, deployments and monitoring while building reusable tooling and guardrails to raise reliability and efficiency.

You’ll partner with engineering, platform and security teams to remediate vulnerabilities throughout the SDLC. You’ll implement automated security testing, secrets management and policy enforcement, and support incident analysis to