Python Developer (DevOps Experience mandatory)

GCS Recruitment; Bolsterstone; On-site; GBP 90,000 - 130,000; Full time

Job summary

GCS Recruitment seeks an experienced Senior DevSecOps Engineer to own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform). You will deliver fast, secure pipelines with provenance-rich SBOMs and digests across teams.

You will design Groovy pipeline steps, extend Python tooling for SLSA provenance, optimize performance, ensure artifact integrity, refactor legacy scripts, document standards, and mentor engineers on secure pipeline

Qualifications

• 7+ years engineering experience with focus on CI/CD platforms or DevSecOps.

Responsibilities

• Design and maintain Groovy pipeline steps for build, test, package, scan, deploy.
• Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation.
• Optimize performance with parallel builds, caching, and scope-reduced BOMs.
• Ensure artifact integrity through correct SHA1/SHA256 mapping and reproducible inputs.
• Refactor legacy scripts to remove global state and standardize templates.
• Document ci-config.yaml standards and usage patterns.
• Mentor engineers on secure pipeline development and supply-chain practices.
• Troubleshoot and prevent pipeline incidents.

Skills

CI/CD ownership

Python development

Jenkins Groovy

Multi-language build tooling

Performance tuning

Security alignment

Artifact integrity

Compliance awareness

Mentoring engineers

Tools

Jenkins

Groovy

Maven

NPM

Python tooling

Helm

Terraform

SBOM/digests tooling

SLSA

SonarQube

Sonatype IQ

SAST tooling

Job description

Overview

Own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supply‑chain integrity across teams.

Core Responsibilities

• Design and maintain Groovy pipeline steps (build, test, package, scan, deploy).
• Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container).
• Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch).
• Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling).
• Refactor legacy scripts (remove global state, consolidate hashing, standardize templates).
• Document ci-config.yaml standards and usage patterns.
• Mentor engineers on secure pipeline development and supply-chain practices.
• Troubleshoot and prevent pipeline incidents.

Essential Skills: -

• 7+ years engineering; 3+ in CI/CD platform or DevSecOps.
• Ownership and collaborative mindsets, able to operate with minimal supervision.
• Advanced Python development experience - (best coding practises, APIs, JSON/YAML processing, tooling scripts) - should demonstrate key projects in CV
• Strong Jenkins + Groovy shared library expertise.
• Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata.
• Supply-chain security (SLSA, CycloneDX SBOM, digests).
• Experience with SonarQube, Sonatype IQ, container and SAST scanning.
• Proven performance tuning (caching, parallelization, dependency pruning).
• Compliance Awareness.

Nice-to-Have

• Artifact signing / attestations (cosign, OCI).
• Terraform module and Helm chart publishing patterns.
• GitOps or release automation experience.
• GCP/AWS cloud experience