Senior DevSecOps Lead: Secure CI/CD & IaC Automation

Capgemini; Greater London; On-site; GBP 85,000 - 110,000; Full time

Job summary

Capgemini is seeking a DevSecOps Lead to drive secure software delivery across multiple cloud environments. The role focuses on embedding security, compliance and automation into the delivery lifecycle and establishing repeatable processes for DevSecOps across environments.

You'll collaborate with developers, security engineers and infrastructure teams to enforce policies, enable IaC, and improve incident response and governance. UK-based, full-time, with security clearance expectations.

Qualifications

• Proven experience as a DevSecOps Lead across multiple cloud environments and security tooling.
• Experience embedding security, compliance and automation in the software delivery lifecycle.
• Leading distributed teams of developers, testers and DevSecOps engineers.

Responsibilities

• Design, implement, and improve DevSecOps practices across delivery teams.
• Embed security, compliance and automation into the software delivery lifecycle.
• Establish consistent, documented processes used by DevSecOps across environments.
• Coordinate release updates across product and platform scope.
• Vulnerability lifecycle management and risk acceptance.
• Policy enforcement for workloads, containers and infrastructure.
• Collaborate with developers to ensure security standards and governance.
• Enable and govern Infrastructure as Code practices across teams.

Skills

Azure & AWS

Networking basics

CI/CD GitOps

Security tooling

Containers orchestration

Infrastructure as Code

Observability tools

Scripting automation

GDS lifecycle

Tools

GitHub Actions

Argo CD

Argo Rollouts

Trivy

HashiCorp Vault

cert-manager

Docker

AKS

AWS EKS

Terraform

Grafana

Loki

Python

Bash

OCI (Oracle Cloud Infra)

Job description

Capgemini is seeking a DevSecOps Lead to drive secure software delivery across multiple cloud environments. The role focuses on embedding security, compliance and automation into the delivery lifecycle and establishing repeatable processes for DevSecOps across environments.

You'll collaborate with developers, security engineers and infrastructure teams to enforce policies, enable IaC, and improve incident response and governance. UK-based, full-time, with security clearance expectations.