Principal DevSecOps Engineer

Capgemini; Bath; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Disability Confident Employer

Applaud peer recognition portal

Learning for life – 250,000 courses

Job summary

Capgemini is seeking a DevSecOps Lead in the United Kingdom to drive security, automation and governance across multiple digital product teams within a major transformation programme. You will embed secure-by-design practices and coordinate CI/CD workflows across Azure, AWS and on-prem environments.

You'll work with developers, DevSecOps engineers and testers to set standards, implement IaC, and ensure compliance with client security controls, with SC clearance as a potential requirement.

Qualifications

• Proven experience leading DevSecOps teams and implementing secure delivery practices across multiple environments.
• Strong expertise in Azure and AWS with networking fundamentals and OCI desirable.
• Hands-on with CI/CD and GitOps using modern tooling and security standards.

Responsibilities

• Design, implement and continuously improve DevSecOps across delivery teams.
• Lead vulnerability lifecycle management and risk acceptance processes.
• Enforce policies for workloads, containers and infrastructure.
• Establish observability, logging and audit controls across environments.
• Govern change control from development to live release.
• Collaborate with developers to embed secure-by-design practices and ensure compliance.
• Enable and govern Infrastructure as Code practices across teams.
• Contribute to incident response and remediation with lessons learned.

Skills

Azure

AWS

Networking

CI/CD

GitOps

Security tooling

Containers

Infrastructure as Code

Observability

Scripting

GDS experience

Tools

GitHub Actions

Argo CD

Argo Rollouts

Terraform

HashiCorp Vault

cert-manager

Docker

Kubernetes

Grafana

Loki

Job description

About The Job You’re Considering

In Digital Customer Experience we specialize in navigating our clients through the complexities of large-scale, technology-driven transformation programs, using our skills to drive outstanding delivery. Having the right people using the right methodology and following the right process gives every client the right result.

The DevOps and Platform Engineering capability within Digital Customer Experience is a growing team of people dedicated to ensuring that the technologies selected and the way that they are implemented meet the business objectives of our clients. There are several disciplines within the Digital Customer Experience team: delivery, business, integration and digital architects and technical managers, and many of our people can perform in more than one of these roles.

Your role

Drive and coordinate DevSecOps practices across multiple digital products delivered as part of a wider business and digital transformation programme. You will embed security, compliance and automation into the software delivery lifecycle, ensuring platforms and applications meet stringent security and operational standards. You will also establish consistent, documented processes used by DevSecOps engineers across each environment, including a coordinated approach for releasing updates across the integrated set of products and platforms in scope.

This role requires deep expertise in CI/CD pipelines, delivery workflows and security tooling across multiple cloud environments, alongside strong collaboration with developers, DevSecOps engineers, infrastructure engineers and test teams.

Your day-to-day responsibility will be to design, implement, document and continuously improve DevSecOps practices across the delivery teams, including:

• Vulnerability lifecycle management, including allowlist processes and risk acceptance where required
• Policy enforcement for workloads, container images and infrastructure
• Observability, monitoring, logging and audit controls. Tracking and remediation of technical debt and improving the quality of developed code
• Control and governance of change across the path to live
• Partner with developers to embed secure-by-design engineering and ensure compliance with client’s security standards and technical standards.
• Enable and govern Infrastructure as Code (IaC) practices across teams and environments
• Contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured, actions tracked, and documenting security processes, controls and operational runbooks.

You can bring your whole self to work. At Capgemini building an inclusive future is part of everyday life and will be part of your working reality. We have built a representative and welcoming environment, for everyone.

Your Skills And Experience

Proven experience as a DevSecOps Lead, establishing and operating DevSecOps ways of working and associated tooling across the following areas (hands-on and leading others):

• Strong expertise in Azure, AWS, and networking fundamentals. Additional experience in Oracle Cloud Infrastructure also desirable
• CI/CD and GitOps in a secure environment (e.g. GitHub Actions, Argo CD, Argo Rollouts)
• Security scanning, compliance tooling, and secrets and identity management (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager)
• Containers and orchestration (e.g. Docker, Azure Kubernetes Service, AWS EKS)
• Infrastructure as Code (e.g. Terraform)
• Observability (e.g. Grafana, Loki)
• Scripting and automation (e.g. Python, Bash)
• Experience delivering within the UK Government Digital Service (GDS) lifecycle on a public sector engagement, or a demonstrated ability leading distributed, cross-functional teams, particularly with developers, testers and DevSecOps engineers.

We are a Disability Confident Employee

Capgemini is proud to be a Disability Confident Employer (Level 2) under the UK Government’s Disability Confident scheme.

As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who:

• Declare they have a disability, and Meet the minimum essential criteria for the role.

Please opt in during the application process.

Your security clearance

To be successfully appointed to this role, it is a requirement to obtain Security Check (SC) clearance. To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements. Throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality.

Some posts are restricted to sole UK Nationals for security reasons; therefore, you may be asked about your citizenship in the application process.

Make it real – what does it mean for you?

We realise a Total Reward package should be more than just compensation. At Capgemini we offer range of core and flexible benefits and have a Peer Recognition Portal called Applaud.

You will be empowered to explore, innovate, and progress. You will benefit from Capgemini’s ‘learning for life’ mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard ManageMentor, Cybersecurity qualifications and much more.

You’ll be bringing your unique skills and perspectives to the team, inspiring and taking inspiration from your teammates as you unlock value in everything you do. You’ll be joining a professional community of experts, who have got your back and will support you, every step of the way.

Why you should consider Capgemini

Growing clients’ businesses while building a more sustainable, more inclusive future is a tough ask. When you join Capgemini, you’ll join a thriving company and become part of a collective of free-thinkers, entrepreneurs and industry experts. We find new ways technology can help us reimagine what’s possible. It’s why, together, we seek out opportunities that will transform the world’s leading businesses, and it’s how you’ll gain the experiences and connections you need to shape your future. By learning from each other every day, sharing knowledge, and always pushing yourself to do better, you’ll build the skills you want. You’ll use your skills to help our clients leverage technology to innovate and grow their business. So, it might not always be easy, but making the world a better place rarely is.

About Capgemini

Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organisations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2024 global revenues of €22.1 billion.

Make it real | www.capgemini.com