Senior Python CI/CD Engineer — Secure Pipelines

GCS Recruitment

Bolsterstone

On-site

GBP 90,000 - 130,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

GCS Recruitment seeks an experienced Senior DevSecOps Engineer to own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform). You will deliver fast, secure pipelines with provenance-rich SBOMs and digests across teams.

You will design Groovy pipeline steps, extend Python tooling for SLSA provenance, optimize performance, ensure artifact integrity, refactor legacy scripts, document standards, and mentor engineers on secure pipeline

Qualifications

7+ years engineering experience with focus on CI/CD platforms or DevSecOps.

Responsibilities

Design and maintain Groovy pipeline steps for build, test, package, scan, deploy.
Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation.
Optimize performance with parallel builds, caching, and scope-reduced BOMs.
Ensure artifact integrity through correct SHA1/SHA256 mapping and reproducible inputs.
Refactor legacy scripts to remove global state and standardize templates.
Document ci-config.yaml standards and usage patterns.
Mentor engineers on secure pipeline development and supply-chain practices.
Troubleshoot and prevent pipeline incidents.