Principal Devsecops Engineer

83Zero Ltd; Rowberrow; Hybrid; GBP 110,000 - 125,000; Full time

Benefits offered by this job

Pension

Benefits package

Bonus 5-10%

Job summary

83Zero Ltd. is seeking a Principal DevSecOps Engineer to lead secure, automated CI/CD and GitOps across complex transformation programmes in a hybrid Bristol-based setup.

You will embed security scanning, vulnerability management and governance across delivery workflows while driving IaC and observability practices. You’ll combine hands-on engineering with leadership to ensure secure-by-design foundations, participate in incident response and support technical debt remediation within a growing

Qualifications

• Extensive hands-on DevSecOps experience delivering secure CI/CD and GitOps pipelines.
• Experience embedding security scanning, vulnerability management and secrets controls into delivery workflows.
• Strong background in IaC, infrastructure automation and secure-by-design engineering practices.

Responsibilities

• Design and continuously improve secure, automated CI/CD and GitOps pipelines.
• Embed security scanning, vulnerability management and secrets management into delivery workflows.
• Establish secure-by-design engineering practices and enforce security and technical standards.
• Lead Infrastructure as Code (IaC) practices across teams and environments.
• Drive observability, monitoring, logging and audit controls.
• Support incident response, patching, compliance reporting and technical debt remediation.
• Partner with developers and delivery teams to improve engineering quality and security.
• Document security processes, controls and operational runbooks.
• Provide technical leadership and help establish effective DevSecOps ways of working.

Skills

CI/CD & GitOps

Security & Compliance

Containers & Cloud

Infrastructure as Code

Observability

Automation (Python, Bash)

Tools

GitHub Actions

Argo CD

Argo Rollouts

Trivy

HashiCorp Vault

cert-manager

Docker

AWS EKS

AWS IAM

S3

Network policies

Terraform

Grafana

Loki

Python

Bash

Job description

Principal DevSecOps Engineer - PermanentBristol | Hybrid - 3 days per week on-site

£110,000-£125,000 + 5-10% bonus + pension + benefits | Permanent

Build secure, scalable platforms that enable transformation.

We're looking for a Principal DevSecOps Engineer to lead the adoption and continuous improvement of DevSecOps practices across complex technology transformation programmes.

You’ll combine hands‑on engineering with technical leadership - embedding security, automation, governance and reliability throughout the path to live.

What you’ll do

• Design and continuously improve secure, automated CI/CD and GitOps pipelines
• Embed security scanning, vulnerability management and secrets management into delivery workflows
• Establish secure‑by‑design engineering practices and enforce security and technical standards
• Lead Infrastructure as Code (IaC) practices across teams and environments
• Drive observability, monitoring, logging and audit controls
• Support incident response, patching, compliance reporting and technical debt remediation
• Partner with developers and delivery teams to improve engineering quality and security
• Document security processes, controls and operational runbooks
• Provide technical leadership and help establish effective DevSecOps ways of working

What we’re looking for

You’ll be an experienced DevSecOps Lead or Principal Engineer with strong hands‑on and leadership experience across:

• CI/CD & GitOps - GitHub Actions, Argo CD, Argo Rollouts
• Security & compliance - Trivy, vulnerability management, HashiCorp Vault, cert‑manager
• Containers & cloud - Docker, AWS EKS, AWS IAM, S3 and network policies
• Infrastructure as Code - Terraform
• Observability - Grafana, Loki
• Automation - Python and Bash
• Experience delivering within the UK Government Digital Service (GDS) life cycle on a public sector engagement

Why join?

You’ll work on complex, high‑impact transformation programmes where engineering, security and technology come together.

You’ll have access to extensive learning and development opportunities, professional certifications and flexible hybrid working - with the opportunity to shape DevSecOps practices across a growing technology environment.

Security Check (SC) clearance is required, including continuous UK residency for the last five years, alongside the relevant eligibility requirements.

Important: You must be a Sole UK National for this requirement.