Senior DevSecOps Engineer

Capco; Greater London; On-site; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Discretionary bonus

Health insurance

Pension plan

Life insurance

Training & certifications

Job summary

Capco is seeking a Senior DevSecOps Engineer to design, build, and modernise enterprise SDLC platforms. You will focus on CI/CD automation, policy-as-code, and security controls within cloud-native engineering across Azure and Kubernetes.

You will translate architecture into production-ready capabilities, integrate complex technologies, and support engineering teams in adopting scalable, secure delivery practices while exploring AI-enabled tools with proper human oversight and security

Qualifications

• Senior DevSecOps with hands-on experience building enterprise GitLab CI/CD pipelines.
• Proficient in cloud-native engineering and policy-as-code.
• Experience embedding security controls and governance into SDLC.

Responsibilities

• Design and implement enterprise GitLab CI/CD pipelines.
• Embed policy-as-code and automated security gates.
• Integrate Azure, Kubernetes, Azure API Management across services.
• Migrate from legacy tools and enable observability with Grafana and Prometheus.
• Promote responsible AI-enabled workflows with appropriate review.

Skills

GitLab CI/CD

Azure

Kubernetes

DevSecOps

Policy as code

Security controls

SAST/DAST

Secrets management

Tools

Grafana

Prometheus

Snowflake

Salesforce

Artifactory/Nexus

AWS

Azure API Management

Job description

Location: London | Practice Area: Technology & Engineering | Type: Permanent

Build the platforms that power secure, intelligent and scalable enterprise engineering.

The Role

At Capco, we're looking for a Senior DevSecOps Engineer to help design, build and modernise enterprise software delivery capabilities for leading financial services organisations.

You’ll play a key role in developing a modern enterprise Software Development Lifecycle (SDLC) platform, with a focus on CI/CD automation, policy-as-code, security controls and cloud-native engineering.

This is a hands-on engineering opportunity where you’ll translate architecture into production-ready capabilities, integrate complex enterprise technologies and support engineering teams in adopting scalable, secure delivery practices.

You’ll also explore approved AI-enabled engineering tools and workflows to improve development productivity, automation and delivery quality, while maintaining appropriate human oversight, security controls and responsible AI practices.

What You’ll Do

• Build modern CI/CD platforms: Design, develop and implement enterprise GitLab SaaS CI/CD pipelines, reusable engineering patterns and automated workflows, leveraging approved AI-assisted engineering capabilities where appropriate to improve efficiency and quality.
• Embed security and governance: Implement policy-as-code, automated security and quality gates, change controls, SAST, DAST, secrets management and vulnerability management throughout the SDLC.
• Engineer cloud-native solutions: Build and integrate services across Azure, Kubernetes and Azure API Management, supporting application, cloud and data workloads, including Snowflake and Salesforce.
• Modernise enterprise engineering environments: Support migrations from legacy Jenkins, GitLab, SonarQube, Artifactory/Nexus and AWS environments, integrating observability capabilities using Grafana and Prometheus.
• Enable engineering teams: Translate target architecture into working production capabilities, develop reusable platform services and onboard engineering teams, promoting responsible AI-enabled workflows with appropriate review, auditability and human decision-making.

What We’re Looking For

• GitLab and Azure expertise: Extensive hands-on experience designing, building and operating enterprise GitLab CI/CD pipelines and Azure-based engineering solutions.
• Cloud-native engineering: Strong practical experience with Kubernetes, DevSecOps principles, infrastructure automation and policy-as-code.
• Security and governance integration: Experience embedding identity, security controls, automated testing, quality gates and compliance requirements into enterprise delivery pipelines.
• Enterprise modernisation: Demonstrated experience modernising complex engineering environments, integrating multiple technologies and delivering scalable, production-ready platform capabilities.
• Technical leadership and delivery: Ability to take architectural designs through implementation, collaborate with engineering teams and support knowledge transfer, with an interest in applying approved AI tools and automation responsibly to improve engineering outcomes.

Bonus Points For

• Experience integrating Azure API Management with cloud-native platforms and enterprise applications.
• Familiarity with Snowflake, Salesforce and engineering patterns supporting data-intensive workloads.
• Experience migrating from Jenkins, SonarQube, Artifactory/Nexus or AWS-based engineering environments.
• Knowledge of Grafana, Prometheus and enterprise observability practices.
• Experience using AI-assisted development tools or AI-enabled DevSecOps workflows, with an understanding of responsible AI, human review and appropriate security guardrails.

Why Join Capco

• Deliver high-impact technology solutions for Tier 1 financial institutions.
• Work in a collaborative, flat, and entrepreneurial consulting culture.
• Access continuous learning, training, and industry certifications.
• Be part of a team shaping the future of digital financial services.
• Help shape the future of digital transformation across FS & Energy.

We offer a competitive, people-first benefits package designed to support every aspect of your life:

• Core Benefits: Discretionary bonus, competitive pension, health insurance, life insurance and critical illness cover.
• Mental Health: Easy access to CareFirst, Unmind, Aviva consultations, and in-house first aiders.
• Family-Friendly: Maternity, adoption, shared parental leave, plus paid leave for sickness, pregnancy loss, fertility treatment, menopause, and bereavement.
• Family Care: 8 complimentary backup care sessions for emergency childcare or elder care.
• Holiday Flexibility: 5 weeks of annual leave with the option to buy or sell holiday days based on your needs.
• Continuous Learning: Your growth, your way – minimum 40 hours of training annually. Take your pick: workshops, certifications, e-learning. Plus, a Business Coach assigned from Day One to provide one-on-one guidance to support your goals and development.
• Extra Perks: Gympass (Wellhub), travel insurance, Tastecard, season ticket loans, Cycle to Work, and dental insurance.

Inclusion at Capco

We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help.

We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.

Capco does not and shall not discriminate on the basis of race, color, religion (creed), gender, gender expression, age, national origin (ancestry), disability, marital status, sexual orientation, or military status, in any of its activities or operations. In order to track the effectiveness of our recruiting efforts, please consider participating in the optional questionnaire.

#LI-DNI