Python Developer (Devops Experience Mandatory)

GCS; Sheffield; On-site; GBP 90,000 - 120,000; Full time

Job summary

GCS in Sheffield seeks an experienced DevSecOps Engineer to own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). You will deliver fast, secure pipelines with provenance and SBOM data to strengthen supply-chain integrity across teams.

Key responsibilities include designing Groovy pipeline steps, extending Python tooling for SLSA provenance, optimizing performance, ensuring reproducible inputs and secure artifact

Qualifications

• 7+ years engineering experience with 3+ in CI/CD or DevSecOps.
• Strong ownership mindset and ability to work with minimal supervision.
• Advanced Python development including APIs and JSON/YAML processing.
• Proven Jenkins Groovy shared library expertise.
• Deep knowledge of Maven, NPM, Python packaging; familiarity with Helm/Terraform.
• Experience with SLSA, SBOM, digests and security scanning tools.

Responsibilities

• Design and maintain Groovy pipeline steps (build, test, package, scan, deploy).
• Extend Python tooling for SLSA provenance and SBOM generation.
• Optimize performance with caching and parallel builds.
• Ensure artifact integrity and reproducible inputs.
• Refactor legacy scripts and standardize templates.
• Document ci-config.yaml standards and usage patterns.
• Mentor engineers on secure pipeline development and supply-chain practices.
• Troubleshoot and prevent pipeline incidents.

Skills

Jenkins Groovy

Python development

CI/CD tooling

Security scanning

SLSA SBOM

Cloud platforms

Tools

Terraform

Helm

Maven

NPM

Docker

Job description

Overview:

Own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supply‑chain integrity across teams.

Core Responsibilities:

• Design and maintain Groovy pipeline steps (build, test, package, scan, deploy).
• Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container).
• Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch).
• Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling).
• Refactor legacy scripts (remove global state, consolidate hashing, standardize templates).
• Document ci-config.yaml standards and usage patterns.
• Mentor engineers on secure pipeline development and supply-chain practices.
• Troubleshoot and prevent pipeline incidents.

Essential Skills:

• 7+ years engineering; 3+ in CI/CD platform or DevSecOps.
• Ownership and collaborative mindsets, able to operate with minimal supervision.
• Advanced Python development experience - (best coding practises, APIs, JSON/YAML processing, tooling scripts) - should demonstrate key projects in CV
• Strong Jenkins + Groovy shared library expertise.
• Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata.
• Supply-chain security (SLSA, CycloneDX SBOM, digests).
• Experience with SonarQube, Sonatype IQ, container and SAST scanning.
• Proven performance tuning (caching, parallelization, dependency pruning).
• Compliance Awareness.Nice-to-Have
• Artifact signing / attestations (cosign, OCI).
• Terraform module and Helm chart publishing patterns.
• GitOps or release automation experience.
• GCP/AWS cloud experience