DevX Build Pipeline/DevOps Engineer

Undisclosed; Sheffield; Hybrid; GBP 60,000 - 99,000; Full time

Job summary

Undisclosed in Sheffield seeks a senior CI/CD engineer to own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). You will deliver fast, secure, provenance-rich pipelines and strengthen supply‑chain integrity across teams.

Key responsibilities include Groovy pipeline design, Python tooling for SLSA provenance and SBOM, performance tuning, and mentoring engineers on secure pipeline development.

Qualifications

• 7+ years engineering experience.
• 3+ years in CI/CD platform or DevSecOps.
• Strong Jenkins and Groovy expertise.
• Advanced Python automation.

Responsibilities

• Design and maintain Groovy pipeline steps (build, test, package, scan, deploy).
• Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation.
• Optimize performance (parallel builds, caching, BOM pruning).
• Ensure artifact integrity (SHA1/SHA256 mapping, reproducible inputs).
• Mentor engineers on secure pipeline development and supply-chain practices.
• Troubleshoot and prevent pipeline incidents.

Skills

Jenkins Groovy

CI/CD/DevSecOps

Python automation

Maven/NPM/Python packaging

Security scanning

Performance tuning

Mentoring

Tools

SonarQube

Sonatype IQ

Terraform

Helm

Docker

Job description

Duration: contract to run until 30/11/2026

Location: Hybrid. Sheffield, 3 days onsite with additional need to travel to other offices within the UK

Rate: up to £538.20 p/d Umbrellainside IR35

Own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supplychain integrity across teams.

Core Responsibilities

• Design and maintain Groovy pipeline steps (build, test, package, scan, deploy).
• Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container).
• Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch).
• Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling).
• Refactor legacy scripts (remove global state, consolidate hashing, standardize templates).
• Document ci-config.yaml standards and usage patterns.
• Mentor engineers on secure pipeline development and supply-chain practices. Troubleshoot and prevent pipeline incidents.
• 7+ years engineering; 3+ in CI/CD platform or DevSecOps.
• Strong Jenkins + Groovy shared library expertise.
• Advanced Python automation (JSON/YAML processing, tooling scripts).
• Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata.
• Experience with SonarQube, Sonatype IQ, container and SAST scanning.
• Proven performance tuning (caching, parallelization, dependency pruning). Compliance Awareness.

Nice-to-Have

• Terraform module and Helm chart publishing patterns.
• GitOps or release automation experience.

Soft Skills

• Ownership mindset, able to operate with minimal supervision.
• Current state assessment: audit shared library structure with view to understand all building blocks and modules support requests: work on user's reported issues to get to know critical parts of the pipeline and various configuration options. Identify bugs, classify them and develop hot fixes. feature requests: deliver 2 x small features/improvements to pipeline code.