DevSecOps Lead

N Consulting Ltd; Greater London; On-site; GBP 80,000 - 120,000; Full time

Job summary

A leading consulting firm seeks a DevSecOps Lead in London to spearhead a transformative role focused on cloud migration to AWS. The ideal candidate will possess over 14 years of experience in DevOps, strong AWS expertise, and lead cross-functional teams in enforcing security automation and best practices. This role emphasizes strategic planning and excellent communication to ensure the seamless operation of DevSecOps across organizational platforms.

Qualifications

• 14+ years of experience in DevOps or platform engineering.
• Hands-on expertise with AWS cloud services and CI/CD.
• Understanding of cloud security principles.

Responsibilities

• Lead DevSecOps transformation for applications migrating to AWS.
• Define enterprise IaC standards and implement architectural governance.
• Integrate DevSecOps toolchains and automate security practices.

Skills

DevSecOps transformation

Infrastructure-as-Code

AWS cloud services

Security automation

CI/CD pipelines

Terraform

Docker

Kubernetes

CI/CD tools

Communication skills

Education

14+ years in DevOps or Infrastructure

Certifications in AWS and DevSecOps

Tools

Terraform

CloudFormation

GitHub Actions

Azure DevOps

Job description

Role: DevSecOps lead

Location: London

Duration: Contract

We are seeking a highly experienced DevSecOps & IaC Lead to drive enterprise-wide DevSecOps transformation and Infrastructure-as-Code implementation during the migration of large-scale on-prem systems to AWS cloud. This role requires deep expertise across CI/CD pipelines, security automation, cloud-native DevOps tooling, third-party DevSecOps platforms, and large-scale IaC governance.

The ideal candidate will lead cross-functional engineering teams, define DevSecOps strategy, enforce secure-by-design principles, and ensure seamless DevSecOps operations across hybrid and cloud environments.

Key Responsibilities

1. DevSecOps Strategy & Cloud Migration Leadership

• Lead the DevSecOps transformation for applications and platforms migrating from on-prem to AWS.
• Build a roadmap for CI/CD modernization, security automation, and cloud-ready pipelines.
• Ensure DevSecOps practices support lift & shift, replatforming, containerization, and modernization migration patterns.
• Collaborate with cloud, application, SRE, and security teams to ensure DevSecOps maturity improves during and after migration.

2. Infrastructure-as-Code (IaC) Architecture & Governance

• Define enterprise IaC standards using tools such as Terraform, CloudFormation, CDK, Ansible, and GitOps practices.
• Lead IaC implementation for AWS landing zones, networking, security, containers, and application infrastructure.
• Establish modular IaC patterns, reusable blueprints, guardrails, and governance frameworks.
• Drive full lifecycle IaC adoption: provisioning → configuration → drift control → compliance.

3. Cloud-Native & Third-Party DevSecOps Tooling Integration

• Architect and integrate DevSecOps toolchains across cloud and on-prem ecosystems, including:
  • CI/CD: GitHub Actions, GitLab, Jenkins, Azure DevOps
  • Security: Snyk, Checkmarx, SonarQube, Prisma Cloud, Aqua, Twistlock
  • Containers: EKS, ECS, ECR, Helm, ArgoCD, Flux
  • Secrets & identity: AWS Secrets Manager, HashiCorp Vault
  • Compliance: AWS Security Hub, GuardDuty, OPA/Conftest, Checkov
• Ensure deep integration between security scanning, artifact repositories, code quality, and deployment automation.

4. Security Automation & Shift-Left Enablement

• Implement "security-by-default" and "shift-left" practices across the software lifecycle.
• Automate:
  • SAST/DAST
  • Dependency & container image scanning
  • Policy-as-code (Rego/OPA)
  • Secrets scanning
  • Infrastructure compliance
• Establish secure CI/CD pipeline patterns covering application, container, and infrastructure layers.

5. Observability, Reliability & DevOps Excellence

• Partner with SRE, platform, and cloud teams to embed monitoring, logging, tracing, and auditability into pipelines.
• Implement automated quality gates, blue-green/canary deployments, and progressive delivery strategies.
• Standardize operational best practices through automation, runbooks, and deployment frameworks.

6. Governance, Risk, Automation & Compliance

• Ensure all DevSecOps and IaC pipelines comply with enterprise security, audit, and regulatory requirements.
• Define DevSecOps maturity KPIs (deployment frequency, MTTR, security findings, drift metrics).
• Build automated governance controls for release management, security enforcement, and compliance checks.
• Drive adoption of secure cloud operating models across all stakeholders.

7. Leadership & Stakeholder Management

• Lead cross-functional DevSecOps squads and mentor engineers on DevSecOps, IaC, and cloud automation practices.
• Work with program managers to ensure DevSecOps readiness across all migration waves.
• Communicate progress, risks, and technical decisions to senior leadership and architecture boards.
• Provide strategic input on enterprise cloud engineering standards and transformation roadmap.

Required Skills & Experience

Technical Expertise

• 14+ years of experience in DevOps, platform engineering, cloud automation, or infrastructure engineering.
• Strong hands-on experience with AWS cloud services, CI/CD, IaC, and security automation.
• Expertise in:
  • Terraform, CloudFormation, CDK, Ansible
  • Docker, Kubernetes, EKS/ECS, Helm, GitOps
  • GitHub/GitLab/Azure DevOps/Jenkins pipelines
  • Security tools: Snyk, Checkmarx, SonarQube, Prisma Cloud, Vault
  • Logging/observability platforms (CloudWatch, ELK, Datadog)

Security & Compliance Skills

• Strong understanding of cloud security principles: IAM, KMS, encryption, zero trust, least privilege.
• Experience implementing policy-as-code and pipeline security controls.
• Understanding of CIS benchmarks, NIST, ISO27001, compliance frameworks.

Cloud Migration Skills

• Direct experience supporting large-scale on-prem to AWS migrations.
• Strong understanding of migration waves, application onboarding, and pipeline modernization.

Soft Skills & Leadership

• Excellent communication and architectural documentation abilities.
• Experience leading multi-disciplinary teams across dev, infra, cloud, and security domains.
• Ability to influence architects, executives, developers, and operations teams.

Preferred Qualifications

• AWS DevOps Engineer - Professional
• AWS Solutions Architect - Associate/Professional
• HashiCorp Terraform Certification
• Kubernetes certifications (CKAD, CKA, CKS)
• DevSecOps or SRE certifications (nice-to-have)

Success Metrics

• Fully automated, secure CI/CD pipelines across all migration phases
• Enterprise-wide IaC adoption with strong governance and consistency
• Reduction in security vulnerabilities and pipeline defects
• Faster cloud onboarding and deployment times
• Improved security posture and operational reliability post-migration