Senior DevOps Engineer: Secure CI/CD & Build Pipelines (Hybrid)

Hellokindred; England; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

HelloKindred in the United Kingdom is seeking a DevOps Engineer / Build Pipeline Engineer to own and evolve a Jenkins Shared Library powering multi-language builds across Java/Maven, Node/NPM, Python, Helm, Terraform, and container technologies.

You will design Groovy pipeline steps, extend Python tooling for SLSA provenance, SBOM generation, hashing accuracy, and security scan aggregation while mentoring engineers on secure CI/CD and software supply chain practices.

Qualifications

• 7+ years software engineering experience with CI/CD platforms or DevSecOps.
• Strong Jenkins and Groovy Shared Library expertise.
• Advanced Python automation skills, including JSON/YAML processing.
• Knowledge of Maven, NPM, and Python packaging; exposure to Helm and Terraform.

Responsibilities

• Design and maintain Groovy pipeline steps for build, test, package, scan, and deployment.
• Extend Python tooling for SLSA provenance and SBOM generation.
• Integrate security scanning across SonarQube, Sonatype IQ, SAST, and container scanning.
• Optimize pipeline performance with caching, parallel builds, and BOM scope reduction.
• Mentor engineers on secure pipeline development and software supply chain practices.
• Deliver at least two small pipeline features within first 30 days.

Skills

CI/CD ownership

DevSecOps practices

mentoring

Tools

Jenkins

Groovy Shared Library

Python automation

Maven

NPM

Helm

Terraform

Cosign

Container scanning

Job description

HelloKindred in the United Kingdom is seeking a DevOps Engineer / Build Pipeline Engineer to own and evolve a Jenkins Shared Library powering multi-language builds across Java/Maven, Node/NPM, Python, Helm, Terraform, and container technologies.

You will design Groovy pipeline steps, extend Python tooling for SLSA provenance, SBOM generation, hashing accuracy, and security scan aggregation while mentoring engineers on secure CI/CD and software supply chain practices.