Lead DevSecOps Engineer

AECOM; City of Westminster; On-site; GBP 90,000 - 120,000; Full time

Job summary

AECOM's AI Engineering team is seeking a DevSecOps leader to shape CI/CD, IaC, observability, and cloud governance across Azure and GCP. You will drive automated security controls, incident response, and cost-aware optimization while mentoring engineers. The role emphasizes collaboration with platform, product, and AI/ML teams.

Join a global infrastructure leader delivering impactful projects and shaping secure, reliable cloud platforms for a wide range of clients.

Qualifications

• Hands-on DevSecOps across CI/CD, IaC, and security integration.
• Experience delivering secure platform engineering for multi-cloud environments.
• Proven ability to mentor engineers and guide technical decisions.

Responsibilities

• Evolve CI/CD pipelines and reusable workflows with quality and security controls.
• Build observability and runbooks to improve reliability and performance.
• Define service reliability objectives and incident postmortems.
• Embed security into engineering workflows including threat modelling and secrets management.
• Monitor cloud security posture across Azure and GCP and advise on fixes.
• Manage vendor relationships and roadmap discussions with Microsoft and Google Cloud.

Skills

DevSecOps

SRE

Platform engineering

GitHub Actions

Terraform

Observability

Incident management

Cloud governance

Security reviews

Azure

GCP

Tools

Terraform

Azure

GCP

Job description

As part of our AI Engineering team, you will lead the DevSecOps capabilities that help engineers build, release, and operate services across our multi-cloud platform. You will shape CI/CD, Infrastructure as Code, observability, reliability, cloud governance, and secure engineering across Microsoft Azure and Google Cloud Platform (GCP). You will also manage cloud-vendor service reviews, security advisories, escalations, and roadmap discussions.

• Evolve CI/CD pipelines and reusable workflows that enable fast, reliable, and repeatable testing and deployment, with automated quality and security controls
• Build observability and operational readiness through monitoring, logging, tracing, runbooks, and incident response, improving the reliability and performance of production services
• Define and track service reliability objectives, and recovery requirements for production services, using incident reviews to drive continuous improvement.
• Embed proportionate security into engineering workflows and cloud environments, including platform security reviews, threat modelling, access and secrets management, automated scanning, and vulnerability remediation
• Monitor cloud security posture across Azure and GCP, helping teams prioritise misconfigurations, vulnerabilities, and remediation work according to risk
• Manage technical and service relationships with Microsoft, Google Cloud, and other critical vendors, leading service reviews, security advisory responses escalations and roadmap and cost discussions
• Partner with platform, product, and AI/ML engineers on architecture decisions, mentor colleagues, and make clear trade-offs across developer experience, reliability, performance, cost, and security

Must-Have Qualifications

• Demonstrated hands‑on experience across DevOps, SRE, platform engineering, DevSecOps, or related roles, with experience guiding technical decisions or mentoring colleagues
• Experience building and maintaining CI/CD pipelines and release automation, ideally with GitHub Actions or similar tooling
• Hands‑on experience with Infrastructure as Code and cloud platform automation using Terraform
• Demonstrated ownership of production reliability, including observability, service‑level objectives, incident management, post‑incident reviews, capacity planning, and disaster‑recovery testing.
• Practical experience carrying out security reviews and implementing controls across identity, secrets management, software supply chains, and vulnerability management
• Experience working directly with cloud providers or technology vendors, ideally including Microsoft or Google Cloud, on service reviews, escalations, or roadmap discussions
• Practical experience monitoring and optimising cloud expenditure across large Azure or GCP environments.

Preferred Skills

• Experience building internal developer platforms or self‑service cloud capabilities
• Experience applying image scanning, artefact signing, or software provenance controls to containerised workloads
• Familiarity with cloud security posture management, policy‑as‑code, security monitoring, or compliance automation
• Experience supporting AI/ML workloads and SaaS platforms in production, 25‑minute screening call
• Take‑home challenge: A hands‑on task to assess your problem‑solving and technical skills
• Combined technical and cultural interview (in‑person)
• Technical Interview: 1‑hour with 2 of our engineers to discuss your solution to the take‑home challenge
• Culture fit: 30‑minute meeting with our leadership team

Work with Us. Change the World.

At AECOM, we’re delivering a better world. Whether improving your commute, keeping the lights on, providing access to clean water, or transforming skylines, our work helps people and communities thrive. We are the world’s trusted infrastructure consulting firm, partnering with clients to solve the world’s most complex challenges and build legacies for future generations. There has never been a better time to be at AECOM. With accelerating infrastructure investment worldwide, our services are in great demand. We invite you to bring your bold ideas and big dreams and become part of a global team of over 50,000 planners, designers, engineers, scientists, digital innovators, program and construction managers and other professionals delivering projects that create a positive and tangible impact around the world. We’re one global team driven by our common purpose to deliver a better world. Join us.

In AECOM’s AI Engineering team, your work will help deliver technology that directly shapes the physical world around us. We build AI‑driven products that change how infrastructure and buildings are designed and engineered, reducing waste, cutting CO2 , and making the built environment more efficient and sustainable. This role ensures those products and the platforms behind them are reliable, scalable, and secure by design. With our AI Engineering team we’ve created a unique setup: a lean, highly technical team with the speed and ownership of a start up, backed by the scale, resources, and domain expertise of one of the world’s leading engineering firms. There has never been a better time to be at AECOM. We are leading the industry’s AI transformation, and with our people and technology we deliver excellence and innovate with impact. We invite you to bring your bold ideas and big dreams to solve the world’s most complex challenges. We’re one global team driven by our common purpose to deliver a better world. Join us.

AECOM is the global infrastructure leader, committed to delivering a better world. As a trusted professional services firm powered by deep technical abilities, we solve our clients' complex challenges in water, environment, energy, transportation and buildings. Our teams partner with public‑and‑private‑sector clients to create innovative, sustainable and resilient solutions throughout the project lifecycle — from advisory, planning, design and engineering to program and construction management. AECOM is a Fortune 500 firm that had revenue of $16.1 billion in fiscal year 2025. Learn more at aecom.com.

What makes AECOM a great place to work You will be part of a global team that champions your growth and career ambitions. Work on groundbreaking projects‑both in your local community and on a global scale‑that are transforming our industry and shaping the future. With cutting‑edge technology and a network of experts, you’ll have the resources to make a real impact. Our award‑winning training and development programs are designed to expand your technical expertise and leadership skills, helping you build the career you’ve always envisioned. Here, you’ll find a welcoming workplace built on respect, collaboration and community‑where you have the freedom to grow in a world of opportunity.

Why Join Us?

• Work on real‑world problems where AI creates measurable impact.
• Be part of a team where your work matters, and your ideas become real.
• Collaborate with sharp, driven colleagues in a culture of trust, ownership, and high standards.
• Contribute to making the built environment smarter and more sustainable.

At AECOM, we are committed to maintaining a secure and trustworthy recruitment process and take any fraudulent hiring activity seriously. To support this commitment, all newly hired employees are required to attend an in‑person Day 1 onboarding at an AECOM office location as a condition of employment.

About AECOM AECOM is proud to offer comprehensive benefits to meet the diverse needs of our employees. Depending on your employment status, AECOM benefits may include medical, dental, vision, life, AD&D, disability benefits, paid time off, leaves of absences, voluntary benefits, perks, flexible work options, well‑being resources, employee assistance program, business travel insurance, service recognition awards, retirement savings plan, and employee stock purchase plan.