Principal DevOps Engineer - Azure

Capco; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Discretionary bonus

Competitive pension

Health insurance

Life insurance

Critical illness cover

Mental health support

5 weeks annual leave

Training & certifications

Business coaching

Gympass

Travel insurance

Cycle to Work

Dental insurance

Job summary

Capco is seeking a Senior DevSecOps Engineer in London to design and implement enterprise SDLC platforms with a focus on CI/CD automation, policy-as-code, and security controls. You will work across Azure, Kubernetes, and cloud-native services to deliver scalable, secure delivery capabilities for financial services clients.

You will translate architecture into production capabilities, onboard engineering teams, and explore approved AI-enabled workflows with proper oversight and guardrails.

Qualifications

• Experience designing, building and operating enterprise GitLab CI/CD pipelines.
• Strong cloud-native engineering and policy-as-code expertise.
• Experience embedding security controls and governance into SDLC pipelines.

Responsibilities

• Build modern CI/CD platforms and pipelines for enterprise use.
• Embed security, quality gates, and policy-as-code across SDLC.
• Integrate cloud-native services across Azure, Kubernetes, and API Management.
• Migrate and modernise legacy tooling and environments (Jenkins, SonarQube, Artifactory/Nexus, AWS).
• Promote responsible AI-enabled workflows with governance and human review.

Skills

GitLab pipelines

Azure engineering

Kubernetes

Security governance

Technical leadership

Tools

Grafana

Prometheus

Azure API Management

Snowflake

Salesforce

Jenkins

Artifactory/Nexus

Job description

Location: London | Practice Area: Technology & Engineering | Type: Permanent

Build the platforms that power secure, intelligent and scalable enterprise engineering.

The Role

At Capco, we're looking for a Senior DevSecOps Engineer to help design, build and modernise enterprise software delivery capabilities for leading financial services organisations.

You’ll play a key role in developing a modern enterprise Software Development Lifecycle (SDLC) platform, with a focus on CI/CD automation, policy-as-code, security controls and cloud-native engineering.

This is a hands-on engineering opportunity where you’ll translate architecture into production-ready capabilities, integrate complex enterprise technologies and support engineering teams in adopting scalable, secure delivery practices.

You’ll also explore approved AI-enabled engineering tools and workflows to improve development productivity, automation and delivery quality, while maintaining appropriate human oversight, security controls and responsible AI practices.

What You’ll Do

• Build modern CI/CD platforms: Design, develop and implement enterprise GitLab SaaS CI/CD pipelines, reusable engineering patterns and automated workflows, leveraging approved AI-assisted engineering capabilities where appropriate to improve efficiency and quality.
• Embed security and governance: Implement policy-as-code, automated security and quality gates, change controls, SAST, DAST, secrets management and vulnerability management throughout the SDLC.
• Engineer cloud-native solutions: Build and integrate services across Azure, Kubernetes and Azure API Management, supporting application, cloud and data workloads, including Snowflake and Salesforce.
• Modernise enterprise engineering environments: Support migrations from legacy Jenkins, GitLab, SonarQube, Artifactory/Nexus and AWS environments, integrating observability capabilities using Grafana and Prometheus.
• Enable engineering teams: Translate target architecture into working production capabilities, develop reusable platform services and onboard engineering teams, promoting responsible AI-enabled workflows with appropriate review, auditability and human decision-making.

What We’re Looking For

• GitLab and Azure expertise: Extensive hands-on experience designing, building and operating enterprise GitLab CI/CD pipelines and Azure-based engineering solutions.
• Cloud-native engineering: Strong practical experience with Kubernetes, DevSecOps principles, infrastructure automation and policy-as-code.
• Security and governance integration: Experience embedding identity, security controls, automated testing, quality gates and compliance requirements into enterprise delivery pipelines.
• Enterprise modernisation: Demonstrated experience modernising complex engineering environments, integrating multiple technologies and delivering scalable, production-ready platform capabilities.
• Technical leadership and delivery: Ability to take architectural designs through implementation, collaborate with engineering teams and support knowledge transfer, with an interest in applying approved AI tools and automation responsibly to improve engineering outcomes.

Bonus Points For

• Experience integrating Azure API Management with cloud-native platforms and enterprise applications.
• Familiarity with Snowflake, Salesforce and engineering patterns supporting data-intensive workloads.
• Experience migrating from Jenkins, SonarQube, Artifactory/Nexus or AWS-based engineering environments.
• Knowledge of Grafana, Prometheus and enterprise observability practices.
• Experience using AI-assisted development tools or AI-enabled DevSecOps workflows, with an understanding of responsible AI, human review and appropriate security guardrails.

Why Join Capco

• Deliver high-impact technology solutions for Tier 1 financial institutions.
• Work in a collaborative, flat, and entrepreneurial consulting culture.
• Access continuous learning, training, and industry certifications.
• Be part of a team shaping the future of digital financial services.
• Help shape the future of digital transformation across FS & Energy.

We offer a competitive, people-first benefits package designed to support every aspect of your life:

• Core Benefits: Discretionary bonus, competitive pension, health insurance, life insurance and critical illness cover.
• Mental Health: Easy access to CareFirst, Unmind, Aviva consultations, and in-house first aiders.
• Family-Friendly: Maternity, adoption, shared parental leave, plus paid leave for sickness, pregnancy loss, fertility treatment, menopause, and bereavement.
• Family Care: 8 complimentary backup care sessions for emergency childcare or elder care.
• Holiday Flexibility: 5 weeks of annual leave with the option to buy or sell holiday days based on your needs.
• Continuous Learning: Your growth, your way – minimum 40 hours of training annually. Take your pick: workshops, certifications, e-learning. Plus, a Business Coach assigned from Day One to provide one-on-one guidance to support your goals and development.
• Extra Perks: Gympass (Wellhub), travel insurance, Tastecard, season ticket loans, Cycle to Work, and dental insurance.

Inclusion at Capco

We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help.

We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.

Capco does not and shall not discriminate on the basis of race, color, religion (creed), gender, gender expression, age, national origin (ancestry), disability, marital status, sexual orientation, or military status, in any of its activities or operations. In order to track the effectiveness of our recruiting efforts, please consider participating in the optional questionnaire.

#LI-DNI