Devsecops Engineer - Pathogen

Ellison Institute of Technology Oxford; Northampton; On-site; GBP 50,000 - 80,000; Full time

Job summary

A reputable technology institute in the United Kingdom is seeking a DevSecOps Engineer to develop secure cloud infrastructure. You will automate security processes, ensuring strong collaboration among cross-functional teams. The role requires hands-on experience with OCI, Terraform, CI/CD, and various security tools. Beneficial certifications and a proactive approach are essential. This is an excellent opportunity to contribute to a high-impact research environment, making significant advances in data security.

Benefits

Enhanced holiday pay

Pension

Life Assurance

Income Protection

Private Medical Insurance

Hospital Cash Plan

Therapy Services

Perk Box

Electrical Car Scheme

Qualifications

• Strong hands-on experience with cloud infrastructure, ideally Oracle Cloud.
• Proficiency in Terraform or similar infrastructure automation tools.
• In-depth knowledge of containerization technologies and orchestration tools.

Responsibilities

• Design and maintain secure cloud infrastructure using Oracle Cloud Infrastructure (OCI).
• Develop and maintain Infrastructure as Code (IaC) solutions with tools such as Terraform.
• Implement and manage CI/CD pipelines with automated security testing.

Skills

Cloud infrastructure management

Terraform

CI/CD pipelines

Containerization (Docker)

Cloud security best practices

Monitoring tools (Prometheus, Grafana)

Git

Security tools (OWASP ZAP, Burp Suite)

Education

Certifications in Oracle Cloud (OCI)

Tools

Jira

Confluence

Job description

EIT is seeking a DevSecOps Engineer to join the Pathogen Programme. This is an excellent opportunity to help build a secure, automated data platform that supports critical research. In this role, you’ll focus on automation across the development lifecycle, enabling engineers and bioinformaticians to deploy data pipelines and product features efficiently. You will design and maintain infrastructure, create secure automation pipelines, manage cloud environments, and ensure compliance. Working closely with cross‑functional teams, you’ll help deliver solutions that are reliable, scalable, and secure.

Responsibilities

• Design, implement, and maintain secure cloud infrastructure using Oracle Cloud Infrastructure (OCI)
• Develop and maintain Infrastructure as Code (IaC) solutions with tools such as Terraform, ensuring secure and repeatable deployments
• Implement and manage CI/CD pipelines with automated security testing, deployment, and monitoring
• Ensure all components of the data platform—OCI infrastructure, data ingest pipelines, tool deployments, access controls, and monitoring tools—are developed, tested, and deployed using automated best practices
• Collaborate with bioinformaticians to ensure pipelines are secure by design, version‑controlled, and deployed through automated processes
• Work closely with engineering teams to integrate security throughout feature development and deployment
• Automate vulnerability assessments to identify and mitigate risks across systems and environments
• Partner with the security function to embed best practices into new and existing features
• Ensure compliance with security standards and regulations (e.g., ISO 27001, SOC 2)
• Implement monitoring solutions to detect and respond to security incidents in real time
• Perform root‑cause analysis and troubleshoot infrastructure and security issues in production
• Collaborate with technical leads to continuously improve security processes and workflows

Qualifications

• Strong hands‑on experience with cloud infrastructure, ideally Oracle Cloud, including provisioning, configuration, and service management
• Proficiency in Terraform or similar infrastructure automation tools
• Experience implementing and maintaining CI/CD pipelines (e.g., GitHub Actions) with automated security testing
• In‑depth knowledge of containerization technologies (e.g., Docker) and orchestration tools like Kubernetes
• Solid understanding of cloud security best practices, including IAM, network security, and encryption
• Experience with monitoring and alerting tools (e.g., Prometheus, Grafana, ELK stack)
• Proficiency with Git or other version control systems
• Certifications in Oracle Cloud (OCI) or other platforms (AWS, GCP)
• Hands‑on experience with security tools (e.g., OWASP ZAP, Burp Suite)
• Familiarity with project management tools (e.g., Jira, Confluence)
• Knowledge of compliance frameworks and standards (e.g., GDPR, HIPAA, ISO 27001, ISO 13485)
• Previous experience in start‑up or scale‑up environments

Desirable Knowledge, Skills & Experience

• Certifications in Oracle Cloud (OCI) or other platforms (AWS, GCP)
• Hands‑on experience with security tools (e.g., OWASP ZAP, Burp Suite)
• Familiarity with project management tools (e.g., Jira, Confluence)
• Knowledge of compliance frameworks and standards (e.g., GDPR, HIPAA, ISO 27001, ISO 13485)
• Previous experience in start‑up or scale‑up environments

Key Attributes

• Strong collaboration and communication skills
• Willingness to learn and upskill in new technologies
• Hands‑on approach to exploring new tools and developing POCs
• Excellent problem‑solving and analytical abilities, with a critical approach to security challenges
• Ability to manage multiple tasks and meet deadlines in a fast‑paced environment
• Attention to detail and commitment to security and quality assurance
• Flexibility to adapt and contribute to a rapidly scaling organisation

Benefits

• Enhanced holiday pay
• Pension
• Life Assurance
• Income Protection
• Private Medical Insurance
• Hospital Cash Plan
• Therapy Services
• Perk Box
• Electrical Car Scheme

Terms of Appointment

• You must have the right to work permanently in the UK with a willingness to travel as necessary
• You will live in, or within easy commuting distance of, Oxford
• During peak periods, some longer hours may be required and some working across multiple time zones due to the global nature of the programme