Onsite DevSecOps Engineer: Zero Trust & Cloud Security

DXC Technology Company; Farnborough; On-site; GBP 70,000 - 110,000; Full time

Job summary

DXC Technology is seeking a DevSecOps Engineer to lead Zero Trust initiatives across defence cloud and hybrid infrastructure. You will integrate IAM, container security, and automated policy enforcement, ensuring secure, auditable configurations in complex environments.

The role emphasizes collaboration with multi-supplier teams, implementing secure IaC practices and continuous monitoring to detect and respond to incidents while upholding defence security requirements.

Qualifications

• Experience implementing Zero Trust architectures across cloud and on-prem environments.
• Strong expertise in IAM, MFA, RBAC, ABAC and PAM controls.
• Security governance experience in defence or regulated environments.

Responsibilities

• Zero Trust implementation: Apply ZTA principles across defence cloud and hybrid infrastructure, covering identities, devices, networks and data.
• Pipeline security: Embed automated compliance checks, container scanning and vulnerability assessments in CI/CD pipelines.
• Identity and access: Enforce IAM, MFA, RBAC, ABAC and PAM controls.
• Infrastructure as Code: Manage secure, immutable infrastructure and network policies through controlled, repeatable code.
• Monitoring and enforcement: Use telemetry and automated controls to detect, contain and respond to anomalies.

Skills

Zero Trust

Cloud infrastructure security

Networking & IAM concepts

Security leadership

Communication

Tools

Docker

Kubernetes

Terraform

Ansible

CloudFormation

Istio

Prisma Cloud

Trivy

Job description

DXC Technology is seeking a DevSecOps Engineer to lead Zero Trust initiatives across defence cloud and hybrid infrastructure. You will integrate IAM, container security, and automated policy enforcement, ensuring secure, auditable configurations in complex environments.

The role emphasizes collaboration with multi-supplier teams, implementing secure IaC practices and continuous monitoring to detect and respond to incidents while upholding defence security requirements.