Platform Dev Sec Ops Lead

Frazer-nash View All Jobs

Leatherhead

On-site

GBP 90,000 - 120,000

Full time

2 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Flexible Working

Competitive salary

25 days holiday entitlement

Pension scheme

Professional development

Job summary

Frazer-Nash Consultancy is seeking a Platform Dev Sec Ops Lead to drive secure, scalable digital delivery. You will oversee DevSecOps practices, govern platform engineering standards and liaise with architects, security specialists and delivery teams.

The role requires extensive cloud security, IaC, and automation experience within regulated sectors, plus ability to mentor engineers and promote best practices across teams.

Qualifications

Significant experience in platform engineering and DevSecOps in regulated environments.
Experience operating digital engineering platforms and cloud security.
Ability to translate standards into practical engineering solutions.
Proven track record mentoring engineers and leading DevSecOps adoption.

Responsibilities

Lead platform DevSecOps practices across the engineering delivery lifecycle.
Oversee development and continuous improvement of the Digital Engineering Environment.
Provide governance, assurance and accreditation evidence for projects.
Coach delivery teams on best practices for secure software delivery.

Skills

DevSecOps

CI/CD

Cloud security

Stakeholder engagement

Mentoring

Tools

Azure

Terraform

Bicep

Docker

Kubernetes

Job description

This is an exciting opportunity to play a key role in enabling secure, scalable and high-quality digital delivery across the organisation. You will work closely with architects, engineers, security specialists and delivery teams to implement best practices, establish technical standards and ensure our platforms support efficient and compliant software delivery. The ideal candidate will have a solid platform engineering and DevSec Ops background, with experience that should include several of the following:

Operating the operation, development and improvement of digital engineering platforms and environments.
Implementing and supporting DevSec Ops practices across CI/CD pipelines, Infrastructure as Code and automation tooling.
Designing and maintaining secure engineering environments, release controls and quality assurance processes.
Working with architecture and security teams to translate technical standards and guardrails into practical engineering solutions.
Managing platform risks, dependencies, constraints and improvement initiatives.
Supporting cloud security, secrets management, environment segregation and automated assurance controls.
Developing reusable tooling, templates and engineering standards that improve consistency across delivery teams.
Supporting governance, audit, assurance and accreditation activities through the provision of technical evidence and documentation.
Coaching and supporting engineers and delivery teams in the adoption of DevSec Ops best practice.
Providing technical recommendations and advice on delivery, security, resilience, performance and cost trade-offs. Significant experience operating and managing digital engineering platforms within regulated environments.
Solid DevSecOps skills, including CI/CD pipelines, Infrastructure as Code, automation and cloud security.
Experience enabling multiple delivery teams through shared engineering platforms, tooling and standards.
Comprehensive knowledge of governance, assurance, audit, and accreditation requirements.
Experience implementing secure software delivery practices and engineering controls.
Knowledge of platform engineering principles and modern software delivery approaches.
Ability to identify and manage technical risks, dependencies and constraints.
Effective stakeholder engagement and communication skills.
Experience producing technical documentation and assurance evidence for governance purposes.
Effective written and verbal communication skills., Experience working within highly regulated sectors such as defence, nuclear, energy, transport or government.
Experience with Microsoft Azure cloud platforms and associated security services.
Experience implementing Infrastructure as Code using tools such as Terraform or Bicep.
Experience with containerisation and orchestration technologies such as Docker and Kubernetes.
Knowledge of secure software development lifecycle (SSDLC) practices.
Experience supporting security accreditation and compliance activities.
Familiarity with monitoring, observability and platform performance management tools.
Experience developing platform engineering roadmaps and improvement strategies.
Experience mentoring engineers and promoting DevSec Ops best practice across teams.
Relevant cloud, security or DevOps certifications.

Due to the nature of the work that Frazer-Nash Consultancy undertake, candidates will be required to undergo pre-employment screening and must be able to satisfy clearance criteria for UK National Security Vetting.

At Frazer-Nash, we empower endeavour for meaningful results. Our Digital & AI team delivers innovative digital, data and AI solutions that support complex programmes in regulated and assurance-led environments. We are seeking an experienced Platform Dev Sec Ops Lead to oversee the development and continuous improvement of our Digital Engineering Environment and Dev Sec Ops capability.

Benefits