Lead / Principal DevSecOps Engineer

83zero Ltd; West of England; Hybrid; GBP 110,000 - 140,000; Full time

Benefits offered by this job

Flexible hybrid working

Learning and development opportunities

Professional certifications

Job summary

83zero Ltd is seeking a Principal DevSecOps Engineer to lead the adoption and continuous improvement of DevSecOps across complex transformation programmes. You will combine hands-on engineering with leadership, embedding security, automation, governance and reliability throughout the path to live.

You’ll design secure, automated CI/CD and GitOps pipelines, embed vulnerability management and secrets handling, and enforce secure-by-design practices across teams while driving IaC, observability and

Qualifications

• Strong experience delivering DevSecOps in complex programmes.
• Ability to lead secure-by-design engineering practices.
• Experience embedding security scanning in CI/CD pipelines.

Responsibilities

• Design and improve secure CI/CD and GitOps pipelines.
• Embed security scanning, vulnerability management and secrets handling into workflows.
• Establish secure-by-design practices and enforce standards.
• Lead IaC practices across teams and environments.
• Drive observability, monitoring, logging and audit controls.
• Support incident response, patching and compliance reporting.
• Partner with developers to improve engineering quality and security.
• Document security processes and runbooks.
• Provide technical leadership for DevSecOps ways of working.

Skills

DevSecOps leadership

Security engineering

Automation scripting

Cloud security

Governance and compliance

Collaboration with delivery teams

Tools

GitHub Actions

Argo CD

Argo Rollouts

Trivy

HashiCorp Vault

cert-manager

Docker

AWS EKS

AWS IAM

S3

network policies

Grafana

Loki

Python

Bash

Job description

Job Type: Permanent

Build secure, scalable platforms that enable transformation.

We're looking for a Principal DevSecOps Engineer to lead the adoption and continuous improvement of DevSecOps practices across complex technology transformation programmes.

You’ll combine hands-on engineering with technical leadership - embedding security, automation, governance and reliability throughout the path to live.

What you’ll do

• Design and continuously improve secure, automated CI/CD and GitOps pipelines
• Embed security scanning, vulnerability management and secrets management into delivery workflows
• Establish secure-by-design engineering practices and enforce security and technical standards
• Lead Infrastructure as Code (IaC) practices across teams and environments
• Drive observability, monitoring, logging and audit controls
• Support incident response, patching, compliance reporting and technical debt remediation
• Partner with developers and delivery teams to improve engineering quality and security
• Document security processes, controls and operational runbooks
• Provide technical leadership and help establish effective DevSecOps ways of working

What we’re looking for

• CI/CD & GitOps - GitHub Actions, Argo CD, Argo Rollouts
• Security & compliance - Trivy, vulnerability management, HashiCorp Vault, cert-manager
• Containers & cloud - Docker, AWS EKS, AWS IAM, S3 and network policies
• Observability - Grafana, Loki
• Automation - Python and Bash
• Experience delivering within the UK Government Digital Service (GDS) lifecycle on a public sector engagement

You’ll work on complex, high-impact transformation programmes where engineering, security and technology come together.

You’ll have access to extensive learning and development opportunities, professional certifications and flexible hybrid working - with the opportunity to shape DevSecOps practices across a growing technology environment.

*You need to be a Sole UK national for this requirement*

Security Check (SC) clearance is required, including continuous UK residency for the last five years, alongside the relevant eligibility requirements.

Ready to shape the future of secure engineering?

If you’re a senior DevSecOps professional who enjoys solving complex technical challenges, leading from the front and building secure engineering practices that scale, we'd love to hear from you.