DevOps Auditor

Interact Consulting Ltd; Greater London; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A consulting firm is seeking a DevOps Auditor to conduct audits for a UK healthcare client. The role is fully remote and requires assessing current AWS DevOps practices, compliance mapping to frameworks like ISO 27001, and delivering comprehensive audit reports. The ideal candidate should have hands-on experience with audit and compliance in a regulated environment. This position offers competitive day rates ranging from £475 to £525 and is initially for 7 days with potential extension.

Qualifications

• Hands-on experience in DevOps practices.
• Experience in audit and compliance within regulated environments.
• Ability to assess maturity and advise on improvements.

Responsibilities

• Review AWS DevOps practices across CI/CD pipelines.
• Capture and assess evidence of compliance.
• Validate security posture via scans and reviews.
• Produce a comprehensive gap analysis and risk register.
• Define minimum DevOps guardrails for future delivery.

Skills

DevOps practices

Audit and compliance

AWS

Infrastructure as Code

CI/CD pipelines

Risk assessment

Job description

Inside IR35 DevOps Auditor Fully Remote .

Location: London, Remote
Category: Contract Jobs
Salary: 475-525pd + Remote Working
Ref: JT/JC/6004

Contact Name: James Clarke
Telephone: [phone]

Inside IR35 | DevOps Auditor (Audit Phase) Duration: Initial 7 days (potential extension up to 12 months) Day Rate: £475-£525 (Inside IR35) Location: Fully remote (UK-based contractors only) Sector: Healthcare / DevOps & Systems Audit

This engagement is ideal for a hands-on DevOps or platform practitioner with audit, compliance, and regulated environment experience who can quickly assess maturity and advise on next steps toward secure, governed operations.

We're seeking an experienced DevOps Auditor to support a UK healthcare client with an audit of their CI/CD, infrastructure, and operational controls. This short engagement (approx. 7 days) will deliver a compliance‑ready assessment, gap analysis, and remediation roadmap, laying the foundation for a potential longer-term 12‑month engagement to implement improvements.

Key Responsibilities

• Review current‑state AWS DevOps practices across CI/CD pipelines, infrastructure‑as‑code (Terraform/Bicep), secrets management, and release/change controls.
• Capture and assess evidence such as pipeline logs, approvals, artefact integrity/signing, access controls, and configuration baselines.
• Validate security posture via SAST/DAST scans, dependency and licence reviews, container/image policies, and supply‑chain controls.
• Evaluate logging, monitoring, and observability practices.
• Map findings to compliance frameworks (e.g., ISO 27001, SOC 2, or NHS DSPT where applicable).
• Produce a comprehensive gap analysis, risk register (with severity and likelihood ratings), and prioritised remediation backlog.
• Define minimum DevOps guardrails for the next delivery phase (e.g., mandatory checks, branch protection, promotion criteria).

Deliverables (by end of audit)

• DevOps Audit Report (executive summary + detailed findings).
• Compliance mapping (ISO 27001 Annex A / SOC 2 trust principles) with gap list.
• Risk register including mitigations, effort, and impact estimates.
• Prioritised remediation backlog and proposed guardrails for Phase 2.
• RACI for change/release management and access review summary.