Senior DevSecOps Engineer – Cloud Security & Compliance

RC Fornax; England; On-site; GBP 70,000 - 100,000; Full time

Job summary

RC Fornax in the United Kingdom seeks a senior DevSecOps Engineer to design, implement and maintain secure platforms and CI/CD pipelines across Azure, AWS, and hybrid clouds. You will embed SSDLC, threat modelling, and secure-by-design practices within the software lifecycle.

You'll lead DevSecOps activities in highly regulated environments, mentor engineers, and advance automated security controls, vulnerability management, and governance across projects and teams.

Qualifications

• Experience in Defence, Aerospace, MOD, or similarly regulated environments.
• 5+ years in DevOps, SecDevOps, Platform Engineering, Cloud Security, or Cyber Security Engineering.
• Strong SSDLC understanding.
• Experience implementing CI/CD pipelines with Azure DevOps, GitHub Actions, GitLab CI/CD, Jenkins.
• Hands-on with IaC technologies such as Terraform, Bicep, CloudFormation, or Ansible.
• Experience integrating security tools (SAST, DAST, SCA, container security, secrets management, and vulnerability scanning).
• Strong cloud security knowledge across Azure, AWS, or hybrid environments.
• Experience leading DevSecOps teams and mentoring engineers.
• Knowledge of Zero Trust and secure-by-design delivery frameworks.
• Experience supporting classified government environments.
• Knowledge of NIST, ISO 27001, NCSC, NIS2, or similar frameworks.
• Experience with threat modelling, security architecture reviews, and cloud governance.
• Experience implementing SIEM, SOAR, or observability platforms.
• Certifications: CISSP, CCSP, Security+ or equivalent.
• Certifications: Azure Security Engineer, AWS Security Specialty, CKA/CKS.

Responsibilities

• Design, implement, and maintain secure DevSecOps platforms, CI/CD pipelines, and automated security controls.
• Embed security testing and compliance validation throughout the software development lifecycle.
• Develop and maintain Infrastructure as Code (IaC) solutions using industry-standard tooling.
• Support and enhance secure Azure, AWS, and hybrid cloud environments.
• Implement automated vulnerability management, security scanning, and remediation processes.
• Collaborate with engineering, security, infrastructure, and architecture teams to drive secure-by-design principles.
• Support threat modelling, security reviews, risk assessments, and cyber incident response activities.

Skills

DevSecOps

Platform Engineering

Cloud Security

SSDLC

Threat Modelling

Security Architecture

Zero Trust

Security Certifications

Education

CISSP

CCSP

Security+

CEH

GIAC

CKA / CKS

Tools

Terraform

Bicep

CloudFormation

Ansible

Azure DevOps

GitHub Actions

GitLab CI/CD

Jenkins

SAST tools

DAST tools

SCA tools

Container Security

Secrets Management

Vulnerability Scanning

Job description

RC Fornax in the United Kingdom seeks a senior DevSecOps Engineer to design, implement and maintain secure platforms and CI/CD pipelines across Azure, AWS, and hybrid clouds. You will embed SSDLC, threat modelling, and secure-by-design practices within the software lifecycle.

You'll lead DevSecOps activities in highly regulated environments, mentor engineers, and advance automated security controls, vulnerability management, and governance across projects and teams.