Senior DevSecOps Engineer: Secure CI/CD & IaC Leader

Capgemini; Bristol; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Total rewards package

Applaud portal

Learning for life

Job summary

Capgemini in the United Kingdom is hiring a DevSecOps Lead to design, implement and improve secure DevSecOps practices across delivery teams. You will drive automated CI/CD pipelines, embed security scanning and manage vulnerability lifecycles in complex programs, including government-facing engagements.

You'll lead hands-on delivery and mentoring, partner with developers to embed secure-by-design engineering, and document controls and runbooks.

Qualifications

• Proven experience as a DevSecOps Lead, establishing and operating DevSecOps ways of working and tooling.
• Hands-on delivery and ability to mentor others across CI/CD, security tooling and cloud platforms.
• Experience with government or public sector programmes is highly desirable.

Responsibilities

• Design, implement and continuously improve secure DevSecOps practices across delivery teams.
• Build secure, automated CI/CD pipelines and integrate security scanning into workflows.
• Manage vulnerability lifecycles, secrets, and policy enforcement for workloads and infrastructure.
• Oversee observability, monitoring, logging and audit controls; track technical debt and code quality.
• Coordinate change governance across to-live, partnering with developers for secure-by-design engineering.
• Enable and govern Infrastructure as Code (IaC) practices; contribute to incident response and runbooks.

Skills

DevSecOps leadership

CI/CD (GitOps)

Security tooling

Containers & orchestration

Infrastructure as Code

Observability

Scripting (Python, Bash)

Cloud (AWS)

UK Government project experience

Tools

GitHub Actions

Argo CD

Argo Rollouts

Trivy

HashiCorp Vault

cert-manager

Docker

AWS EKS

Terraform

Grafana

Loki

Python

Bash

Job description

Capgemini in the United Kingdom is hiring a DevSecOps Lead to design, implement and improve secure DevSecOps practices across delivery teams. You will drive automated CI/CD pipelines, embed security scanning and manage vulnerability lifecycles in complex programs, including government-facing engagements.

You'll lead hands-on delivery and mentoring, partner with developers to embed secure-by-design engineering, and document controls and runbooks.