Principal Devsecops Engineer

Capgemini; Bath; On-site; GBP 90,000 - 130,000; Full time

Job summary

Capgemini is seeking a Principal DevSecOps Engineer for roles in Bath, London or Bristol to drive secure software delivery across multiple digital products. You will embed security, compliance, and automation throughout the delivery lifecycle, coordinating with developers, DevSecOps engineers, and infrastructure teams to meet rigorous security and operational standards.

You will design, implement, and continuously improve DevSecOps practices, including vulnerability management, policy

Qualifications

• Proven DevSecOps leadership across multiple environments.
• Hands-on with secure CI/CD pipelines and GitOps tooling.
• Experience with cloud platforms and security tooling.

Responsibilities

• Design and implement DevSecOps practices across delivery teams.
• Embed security and automation into the software lifecycle.
• Establish documented processes for release governance and IaC.
• Collaborate with developers, infra, and testing teams to improve security posture.

Skills

Azure & AWS

Cloud networking

CI/CD GitOps

Security tooling

Containers & orchestration

Terraform

Observability

Scripting (Python, Bash)

Job description

In Digital Customer Experience we specialize in navigating our clients through the complexities of large-scale, technology-driven transformation programs, using our skills to drive outstanding delivery. Having the right people using the right methodology and following the right process gives every client the right result.

The DevOps and Platform Engineering capability within Digital Customer Experience is a growing team of people dedicated to ensuring that the technologies selected and the way that they are implemented meet the business objectives of our clients. There are several disciplines within the Digital Customer Experience team: delivery, business, integration and digital architects and technical managers, and many of our people can perform in more than one of these roles.

Your role

Drive and coordinate DevSecOps practices across multiple digital products delivered as part of a wider business and digital transformation programme. You will embed security, compliance and automation into the software delivery lifecycle, ensuring platforms and applications meet stringent security and operational standards. You will also establish consistent, documented processes used by DevSecOps engineers across each environment, including a coordinated approach for releasing updates across the integrated set of products and platforms in scope.

This role requires deep expertise in CI/CD pipelines, delivery workflows and security tooling across multiple cloud environments, alongside strong collaboration with developers, DevSecOps engineers, infrastructure engineers and test teams.

Your day-to-day responsibility will be to design, implement, document and continuously improve DevSecOps practices across the delivery teams, including:

• - Vulnerability lifecycle management, including allowlist processes and risk acceptance where required
• - Policy enforcement for workloads, container images and infrastructure
• - Observability, monitoring, logging and audit controls. Tracking and remediation of technical debt and improving the quality of developed code
• - Control and governance of change across the path to live
• - Partner with developers to embed secure-by-design engineering and ensure compliance with client’s security standards and technical standards.
• - Enable and govern Infrastructure as Code (IaC) practices across teams and environments
• - Contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured, actions tracked, and documenting security processes, controls and operational runbooks.

You can bring your whole self to work. At Capgemini building an inclusive future is part of everyday life and will be part of your working reality. We have built a representative and welcoming environment, for everyone

Your skills and experience

Proven experience as a DevSecOps Lead, establishing and operating DevSecOps ways of working and associated tooling across the following areas (hands-on and leading others):

• - Strong expertise in Azure, AWS, and networking fundamentals. Additional experience in Oracle Cloud Infrastructure also desirable
• - CI/CD and GitOps in a secure environment (e.g. GitHub Actions, Argo CD, Argo Rollouts)
• - Security scanning, compliance tooling, and secrets and identity management (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager)
• - Containers and orchestration (e.g. Docker, Azure Kubernetes Service, AWS EKS)
• - Infrastructure as Code (e.g. Terraform)
• - Observability (e.g. Grafana, Loki)
• - Scripting and automation (e.g. Python, Bash)
• - Experience delivering within the UK Government Digital Service (GDS) lifecycle on a public sector engagement, or a demonstrated ability leading distributed, cross-functional teams, particularly with developers, testers and DevSecOps engineers.

We are a Disability Confident Employee

Capgemini is proud to be a Disability Confident Employer (Level 2) under the UK Government’s Disability Confident scheme.

As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who:

• - Declare they have a disability, and Meet the minimum essential criteria for the role.

Please opt in during the application process

Your security clearance

To be successfully appointed to this role, it is a requirement to obtain Security Check (SC) clearance. To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements. Throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality.

Some posts are restricted to sole UK Nationals for security reasons; therefore, you may be asked about your citizenship in the application process.

Make it real – what does it mean for you?

We realise a Total Reward package should be more than just compensation. At Capgemini we offer range of core and flexible benefits and have a Peer Recognition Portal called Applaud.

You will be empowered to explore, innovate, and progress. You will benefit from Capgemini’s ‘learning for life’ mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard ManageMentor, Cybersecurity qualifications and much more.

You’ll be bringing your unique skills and perspectives to the team, inspiring and taking inspiration from your teammates as you unlock value in everything you do. You’ll be joining a professional community of experts, who have got your back and will support you, every step of the way.

Why you should consider Capgemini

Growing clients’ businesses while building a more sustainable, more inclusive future is a tough ask. When you join Capgemini, you’ll join a thriving company and become part of a collective of free-thinkers, entrepreneurs and industry experts. We find new ways technology can help us reimagine what’s possible. It’s why, together, we seek out opportunities that will transform the world’s leading businesses, and it’s how you’ll gain the experiences and connections you need to shape your future. By learning from each other every day, sharing knowledge, and always pushing yourself to do better, you’ll build the skills you want. You’ll use your skills to help our clients leverage technology to innovate and grow their business. So, it might not always be easy, but making the world a better place rarely is.

About Capgemini

Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organisations and make it real with AI, technology, and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end‑to‑end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2024 global revenues of €22.1 billion.

Principal DevSecOps Engineer Bath, London, Bristol