Senior CI/CD DevSecOps Engineer — Python & Jenkins

GCS; Sheffield; On-site; GBP 90,000 - 120,000; Full time

Job summary

GCS in Sheffield seeks an experienced DevSecOps Engineer to own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). You will deliver fast, secure pipelines with provenance and SBOM data to strengthen supply-chain integrity across teams.

Key responsibilities include designing Groovy pipeline steps, extending Python tooling for SLSA provenance, optimizing performance, ensuring reproducible inputs and secure artifact

Qualifications

• 7+ years engineering experience with 3+ in CI/CD or DevSecOps.
• Strong ownership mindset and ability to work with minimal supervision.
• Advanced Python development including APIs and JSON/YAML processing.
• Proven Jenkins Groovy shared library expertise.
• Deep knowledge of Maven, NPM, Python packaging; familiarity with Helm/Terraform.
• Experience with SLSA, SBOM, digests and security scanning tools.

Responsibilities

• Design and maintain Groovy pipeline steps (build, test, package, scan, deploy).
• Extend Python tooling for SLSA provenance and SBOM generation.
• Optimize performance with caching and parallel builds.
• Ensure artifact integrity and reproducible inputs.
• Refactor legacy scripts and standardize templates.
• Document ci-config.yaml standards and usage patterns.
• Mentor engineers on secure pipeline development and supply-chain practices.
• Troubleshoot and prevent pipeline incidents.

Skills

Jenkins Groovy

Python development

CI/CD tooling

Security scanning

SLSA SBOM

Cloud platforms

Tools

Terraform

Helm

Maven

NPM

Docker

Job description

GCS in Sheffield seeks an experienced DevSecOps Engineer to own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). You will deliver fast, secure pipelines with provenance and SBOM data to strengthen supply-chain integrity across teams.

Key responsibilities include designing Groovy pipeline steps, extending Python tooling for SLSA provenance, optimizing performance, ensuring reproducible inputs and secure artifact