Principal DevSecOps Engineer

Capgemini; Bath; On-site; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Disability Confident Employer

Applaud peer recognition portal

Learning for life & 250,000 courses

Job summary

Capgemini UK is seeking a DevSecOps Lead to drive secure software delivery across multiple digital products within a large transformation portfolio. You will embed security, compliance and IaC practices across environments and coordinate release activities.

The role requires deep CI/CD expertise, strong collaboration with developers and security teams, and a track record of delivering secure, scalable platforms in cloud environments.

Qualifications

• Proven DevSecOps lead with hands-on and leadership experience across security tooling, CI/CD pipelines and cloud platforms.
• Strong expertise in Azure, AWS and networking fundamentals; Oracle Cloud Infrastructure is a plus.
• Experience delivering within UK Government Digital Service (GDS) lifecycle on public sector engagements or leading cross-functional teams.

Responsibilities

• Design, implement and continuously improve DevSecOps practices across multiple products and environments.
• Embed secure-by-design engineering and ensure policy enforcement across workloads and infrastructure.
• Manage vulnerability lifecycle, observability and incident response; coordinate change governance and runbooks.
• Collaborate with developers, security engineers, infra and test teams to release updates safely.

Skills

Azure

AWS

OCI

CI/CD

GitOps

Security tooling

Secrets management

Containers

Kubernetes

Terraform

Observability

Scripting

GDS lifecycle

Tools

GitHub Actions

Argo CD

Argo Rollouts

Trivy

HashiCorp Vault

cert-manager

Docker

AKS

EKS

Terraform

Grafana

Loki

Job description

About The Job You’re Considering

In Digital Customer Experience we specialize in navigating our clients through the complexities of large-scale, technology-driven transformation programs, using our skills to drive outstanding delivery. Having the right people using the right methodology and following the right process gives every client the right result.

The DevOps and Platform Engineering capability within Digital Customer Experience is a growing team of people dedicated to ensuring that the technologies selected and the way that they are implemented meet the business objectives of our clients. There are several disciplines within the Digital Customer Experience team: delivery, business, integration and digital architects and technical managers, and many of our people can perform in more than one of these roles.

Your role

Drive and coordinate DevSecOps practices across multiple digital products delivered as part of a wider business and digital transformation programme. You will embed security, compliance and automation into the software delivery lifecycle, ensuring platforms and applications meet stringent security and operational standards. You will also establish consistent, documented processes used by DevSecOps engineers across each environment, including a coordinated approach for releasing updates across the integrated set of products and platforms in scope.

This role requires deep expertise in CI/CD pipelines, delivery workflows and security tooling across multiple cloud environments, alongside strong collaboration with developers, DevSecOps engineers, infrastructure engineers and test teams.

Your day-to-day responsibility will be to design, implement, document and continuously improve DevSecOps practices across the delivery teams, including:

• Vulnerability lifecycle management, including allowlist processes and risk acceptance where required
• Policy enforcement for workloads, container images and infrastructure
• Observability, monitoring, logging and audit controls. Tracking and remediation of technical debt and improving the quality of developed code
• Control and governance of change across the path to live
• Partner with developers to embed secure-by-design engineering and ensure compliance with client’s security standards and technical standards.
• Enable and govern Infrastructure as Code (IaC) practices across teams and environments
• Contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured, actions tracked, and documenting security processes, controls and operational runbooks.

You can bring your whole self to work. At Capgemini building an inclusive future is part of everyday life and will be part of your working reality. We have built a representative and welcoming environment, for everyone

Your Skills And Experience

Proven experience as a DevSecOps Lead, establishing and operating DevSecOps ways of working and associated tooling across the following areas (hands-on and leading others):

• Strong expertise in Azure, AWS, and networking fundamentals. Additional experience in Oracle Cloud Infrastructure also desirable
• CI/CD and GitOps in a secure environment (e.g. GitHub Actions, Argo CD, Argo Rollouts)
• Security scanning, compliance tooling, and secrets and identity management (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager)
• Containers and orchestration (e.g. Docker, Azure Kubernetes Service, AWS EKS)
• Infrastructure as Code (e.g. Terraform)
• Observability (e.g. Grafana, Loki)
• Scripting and automation (e.g. Python, Bash)
• Experience delivering within the UK Government Digital Service (GDS) lifecycle on a public sector engagement, or a demonstrated ability leading distributed, cross-functional teams, particularly with developers, testers and DevSecOps engineers.

We are a Disability Confident Employee

Capgemini is proud to be a Disability Confident Employer (Level 2) under the UK Government’s Disability Confident scheme.

As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who:

• Declare they have a disability, and Meet the minimum essential criteria for the role.

Please opt in during the application process

Your security clearance

To be successfully appointed to this role, it is a requirement to obtain Security Check (SC) clearance. To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements. Throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality.

Some posts are restricted to sole UK Nationals for security reasons; therefore, you may be asked about your citizenship in the application process.

Make it real – what does it mean for you?

We realise a Total Reward package should be more than just compensation. At Capgemini we offer range of core and flexible benefits and have a Peer Recognition Portal called Applaud.

You’ll be empowered to explore, innovate, and progress. You will benefit from Capgemini’s ‘learning for life’ mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard ManageMentor, Cybersecurity qualifications and much more.

You’ll be bringing your unique skills and perspectives to the team, inspiring and taking inspiration from your teammates as you unlock value in everything you do. You’ll be joining a professional community of experts, who have got your back and will support you, every step of the way.

Why you should consider Capgemini

Growing clients’ businesses while building a more sustainable, more inclusive future is a tough ask. When you join Capgemini, you’ll join a thriving company and become part of a collective of free-thinkers, entrepreneurs and industry experts. We find new ways technology can help us reimagine what’s possible. It’s why, together, we seek out opportunities that will transform the world’s leading businesses, and it’s how you’ll gain the experiences and connections you need to shape your future. By learning from each other every day, sharing knowledge, and always pushing yourself to do better, you’ll build the skills you want. You’ll use your skills to help our clients leverage technology to innovate and grow their business. So, it might not always be easy, but making the world a better place rarely is.

About Capgemini

Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organisations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2024 global revenues of €22.1 billion.

Make it real | www.capgemini.com