Lead DevSecOps Engineer – Bristol

Capgemini; West of England; On-site; GBP 90,000 - 120,000; Full time

Job summary

Capgemini Bristol seeks a Lead DevSecOps Engineer to drive secure software delivery across cloud environments, embedding security and automation into the lifecycle. You will design and operate CI/CD pipelines, enable secure-by-design practices, and collaborate with developers, platform engineers and testers to meet stringent security standards.

The role requires deep experience in CI/CD, security tooling, IaC and modern container platforms.

Qualifications

• Proven experience as a DevSecOps Lead, establishing and operating DevSecOps practices across cloud environments.
• Hands-on and able to lead others in secure CI/CD, security tooling and compliance.
• Experience with AWS or Azure networking fundamentals (IAM, network policies).
• Strong collaboration with developers, testers and DevSecOps engineers.

Responsibilities

• Design, implement and continuously improve secure CI/CD pipelines.
• Integrate security scanning into build, test and deployment workflows.
• Manage vulnerability lifecycle, including allowlist processes and secrets management.
• Enforce policies for workloads, containers and infrastructure.
• Provide observability through logging, monitoring and audit controls.
• ,

Skills

AWS/Azure

CI/CD

Security tooling

Containers

Infrastructure as Code

Observability

Scripting

Stakeholder management

Tools

GitHub Actions

Argo CD

Trivy

HashiCorp Vault

Docker

Kubernetes

Terraform

Grafana

Loki

Job description

Lead DevSecOps Engineer – Bristol

Reference Code: 526092-en_US

Contract Type:Permanent

Professional Communities: Software Engineering

About the job you're considering

In Digital Customer Experience we specialize in navigating our clients through the complexities of large-scale, technology-driven transformation programs, using our skills to drive outstanding delivery. Having the right people using the right methodology and following the right process gives every client the right result.

The DevOps and Platform Engineering capability within Digital Customer Experience is a growing team of people dedicated to ensuring that the technologies selected and the way that they are implemented meet the business objectives of our clients. There are several disciplines within the Digital Customer Experience team: delivery, business, integration and digital architects and technical managers, and many of our people can perform in more than one of these roles.

Your role

You will drive and coordinate DevSecOps, embedding security, compliance and automation into the software delivery lifecycle, ensuring platforms and applications meet stringent security and operational standards. This role requires deep expertise in CI/CD pipelines, delivery workflows and security tooling across multiple cloud environments, alongside strong collaboration with developers, DevSecOps engineers, infrastructure engineers and test teams.

Your day-to-day responsibility will be to design, implement, document and continuously improve DevSecOps practices across the delivery teams, including:

• Secure, automated CI/CD pipelines
• Security scanning integrated into build, test and deployment workflows
• Vulnerability lifecycle management, including allowlist processes and risk acceptance where required and secrets management and identity/access management
• Policy enforcement for workloads, container images and infrastructure
• Observability, monitoring, logging and audit controls. Tracking and remediation of technical debt and improving the quality of developed code
• Control and governance of change across the path to live
• Partner with developers to embed secure-by-design engineering and ensure compliance with client's security standards and technical standards.
• Enable and govern Infrastructure as Code (IaC) practices across teams and environments
• Contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are capture, actions tracked, and document security processes, controls and operational runbooks.

You can bring your whole self to work. At Capgemini building an inclusive future is part of everyday life and will be part of your working reality. We have built a representative and welcoming environment, for everyone

Your skills and experience

Proven experience as a DevSecOps Lead, establishing and operating DevSecOps ways of working and associated tooling across the following areas (hands-on and leading others):

• AWS or Azure, and networking fundamentals (e.g. IAM, network policies)
• CI/CD and GitOps in a secure environment (e.g. GitHub Actions, Argo CD)
• Security and compliance tooling (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager)
• Containers and orchestration (e.g. Docker, Azure Kubernetes Services, AWS EKS)
• Infrastructure as Code (e.g. Terraform)
• Observability (e.g. Grafana, Loki)
• Scripting and automation (e.g. Python, Bash)
• Demonstrated ability to work across cross-functional teams, particularly with developers, testers and DevSecOps engineers.
• Strong facilitation, communication and stakeholder management skills, with experience influencing at multiple levels.

We are a Disability Confident Employee

Capgemini is proud to be a Disability Confident Employer (Level 2) under the UK Government's Disability Confident scheme.

As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who:

• Declare they have a disability, and Meet the minimum essential criteria for the role.

Please opt in during the application process

Your security clearance

To be successfully appointed to this role, it is a requirement to obtain Security Check (SC) clearance.

To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements.Throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality.

Some posts are restricted to sole UK Nationals for security reasons; therefore, you may be asked about your citizenship in the application process.

Make it real – what does it mean for you?

We realise a Total Reward package should be more than just compensation. At Capgemini we offer range of core and flexible benefits and have a Peer Recognition Portal called Applaud.

You will be empowered to explore, innovate, and progress. You will benefit from Capgemini's learning for life mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard ManageMentor, Cybersecurity qualifications and much more.

You'll be bringing your unique skills and perspectives to the team, inspiring and taking inspiration from your teammates as you unlock value in everything you do. You'll be joining a professional community of experts, who have got your back and will support you, every step of the way.

Why you should consider Capgemini

Growing clients' businesses while building a more sustainable, more inclusive future is a tough ask. When you join Capgemini, you'll join a thriving company and become part of a collective of free-thinkers, entrepreneurs and industry experts. We find new ways technology can help us reimagine what's possible. It's why, together, we seek out opportunities that will transform the world's leading businesses, and it's how you'll gain the experiences and connections you need to shape your future. By learning from each other every day, sharing knowledge, and always pushing yourself to do better, you'll build the skills you want. You'll use your skills to help our clients leverage technology to innovate and grow their business. So, it might not always be easy, but making the world a better place rarely is.

About Capgemini

Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organisations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2024 global revenues of €22.1 billion.

Make it real | www.capgemini.com