DevSecOps Engineer: Secure Cloud, CI/CD & IaC Lead

Methods; Gloucester; On-site; GBP 70,000 - 100,000; Full time

Benefits offered by this job

LinkedIn Learning access

Management development programme

Training

Wellness - EAP

Office social events

25 days annual leave + bank holidays +

Job summary

Methods is a UK-based IT Services Consultancy partnering with central government departments to transform public sector delivery. We design secure, end-to-end solutions with a human-centric approach, blending people, technology and data to create value for clients and staff.

This DevSecOps role focuses on hybrid on-prem and cloud infrastructure, IaC, secure SDLC, and CI/CD automation. You will work with Security, Engineering and Architecture to deliver compliant, secure platforms and advance

Qualifications

• Strong DevOps/DevSecOps experience supporting enterprise platforms.
• Experience designing and implementing hybrid on-premise and cloud solutions.
• Experience with Kubernetes, Docker and container platforms.
• Experience with Terraform, Ansible and infrastructure automation tooling.
• Experience with CI/CD pipelines and release management processes.
• Experience integrating security tooling into delivery pipelines.
• Understanding of SaaS, PaaS and IaaS service models.
• Ability to work effectively with cross-functional teams (Security & Engineering).

Responsibilities

• Design, build and support secure on-premise and cloud infrastructure.
• Develop and maintain Infrastructure as Code (Terraform, YAML or equivalent).
• Automate deployment, configuration and operational processes to enable secure and repeatable releases.
• Embed security controls throughout the software development lifecycle (SDLC).
• Implement and maintain CI/CD pipelines, including security scanning and compliance checks.
• Manage platform security, including secrets, certificates, tokens and access controls.
• Apply secure-by-design principles and align solutions with NCSC guidance.
• Identify security risks and vulnerabilities and implement appropriate mitigations.
• Monitor infrastructure, applications and security tooling to detect threats and issues.
• Work with engineering, architecture, security and business teams to deliver secure solutions.
• Conduct peer reviews of infrastructure and deployment code.
• Ensure deployment risks are understood, documented and appropriately managed.
• Support regulatory and security compliance requirements.
• Experience working within Agile delivery environments.

Skills

DevSecOps

Hybrid on-prem/cloud

Kubernetes

Docker

Terraform

CI/CD pipelines

Security tooling

Cross-functional collaboration

Agile delivery

Tools

Kubernetes

Docker

Terraform

Ansible

CI/CD tooling

SonarQube

Trivy

Job description

Methods is a UK-based IT Services Consultancy partnering with central government departments to transform public sector delivery. We design secure, end-to-end solutions with a human-centric approach, blending people, technology and data to create value for clients and staff.

This DevSecOps role focuses on hybrid on-prem and cloud infrastructure, IaC, secure SDLC, and CI/CD automation. You will work with Security, Engineering and Architecture to deliver compliant, secure platforms and advance