Senior DevSecOps Engineer

Plan:it; Greater London; Hybrid; GBP 60,000 - 100,000; Full time

Benefits offered by this job

Equity

Private medical

Nomad working (up to 20 days/year)

Dogs in the office

Job summary

Plan:it in London is seeking a Senior DevSecOps Engineer to own security across the platform. The role is based in London with a hybrid model (2 days per week in the office).

The platform runs on GCP and Kubernetes at scale; you will implement guardrails in CI/CD, harden GCP, manage vulnerabilities, and create secure templates for feature teams. Equity, private medical, nomad working up to 20 days/year, and dogs in the office are offered.

Qualifications

• Extensive hands-on GCP and Kubernetes security experience.
• Proficient with Terraform or OpenTofu.
• Experience with security tooling (Aqua, Falco, Prisma Cloud).
• Scripting in Python or Go.

Responsibilities

• Own security across the multi-tenant platform built on GCP and Kubernetes.
• Implement automated guardrails in CI/CD pipelines.
• Perform GCP hardening and end-to-end vulnerability management.
• Create 'golden path' templates to enable secure delivery by feature teams.

Skills

GCP security

Kubernetes security

Terraform/OpenTofu

Security tooling

Python or Go

Tools

Aqua

Falco

Prisma Cloud

Job description

Office: London (hybrid, 2 days/week)

Salary: Up to £100k

One of the original open banking infrastructure companies — and the list of names running on top of their platform tells you everything you need to know. Household names in payments, accounting, and big tech. They’re not a startup finding their feet, they’re the picks-and-shovels layer that serious fintech businesses depend on.

They’re now looking for a Senior DevSecOps Engineer to own security across the platform.

This isn’t a checkbox compliance role. The platform is multi-tenant, highly available, and built on GCP and Kubernetes at scale — and the person coming in will be laying down the foundational security posture from the ground up. Think automated guardrails baked into CI/CD, GCP hardening, vulnerability management end-to-end, and “golden path” templates that let feature teams ship confidently without cutting corners on security.

It’s the kind of role where you’re building the thing, not auditing it after the fact. If you’ve spent time in a regulated environment and found yourself frustrated by security being bolted on at the end, this is the opposite of that.

The wider perks are solid too — equity, private medical, nomad working (up to 20 days/year from anywhere), and yes, dogs in the office.

Ideal profile: deep GCP and Kubernetes security experience, strong with Terraform or OpenTofu, hands‑on with security tooling (Aqua, Falco, Prisma Cloud or similar), and comfortable scripting in Python or Go. Fintech certifications — SOC2, ISO 27001, PCI DSS — are a genuine bonus given the regulated environment.