Support for DevSecOps Engineering

GardPass Consulting; United Kingdom; Remote; GBP 70,000 - 90,000; Full time

Job summary

A leading consultancy firm is seeking an experienced DevSecOps Consultant to support NATO's IT modernization across various locations. This remote role requires in-depth knowledge of Microsoft Azure and a strong ability to design and manage secure cloud services. Ideal candidates will have excellent communication skills and a proactive approach to DevSecOps processes. Join us to enhance cloud security and efficiency in a collaborative environment.

Qualifications

• 5+ years of experience in DevSecOps roles.
• Experience with audits and regulatory standards.
• Ability to troubleshoot complex Azure Service issues.

Responsibilities

• Deploy and manage secure, scalable landing zones using DevSecOps practices.
• Automate deployment of cloud workloads on landing zones.
• Monitor performance and security of landing zones and workloads.

Skills

In-depth knowledge of Microsoft Azure Cloud IaaS/PaaS Services

Proficiency in designing, deploying, and managing landing zones in Microsoft Azure using IaC and CI/CD pipelines

Expertise in managing governance controls such as Azure Policy

Experience with containerized workloads using Azure Kubernetes Services (AKS)

Experience deploying and monitoring Azure Virtual Machines (VMs)

Strong analytical skills for assessing and improving DevSecOps processes

Understanding of security best practices and compliance requirements

Full proficiency in English

Excellent communication skills for collaboration

Customer relationship skills

Job description

We are seeking a consultant who can support NATO across all its geographical locations. The NCI Agency is looking for support in DevSecOps Engineering to join NATO’s modernization of IT services by leveraging the public cloud (Microsoft Azure). The role involves delivering managed, secure, and reliable IT services.

Start date: October 2025
Clearance: NATO Secret
Location: Remote

Skills:

• In-depth knowledge of Microsoft Azure Cloud IaaS/PaaS Services
• Proficiency in designing, deploying, and managing landing zones in Microsoft Azure using IaC and CI/CD pipelines
• Expertise in managing governance controls such as Azure Policy
• Experience with containerized workloads using Azure Kubernetes Services (AKS)
• Experience deploying and monitoring Azure Virtual Machines (VMs)
• Skills in enabling secure and reliable access to applications
• Strong analytical skills for assessing and improving DevSecOps processes
• Ability to troubleshoot complex Azure Service issues
• Understanding of security best practices and compliance requirements
• Experience with audits and regulatory standards
• Excellent communication skills for collaboration
• Ability to document processes and train teams
• Strong organizational skills
• Customer relationship skills, including negotiating under pressure
• Full proficiency in English; French is advantageous

Activities:

• Deploy and manage secure, scalable landing zones using DevSecOps practices
• Automate deployment of cloud workloads on landing zones
• Utilize Infrastructure as Code and CI/CD pipelines via Azure DevOps
• Build, deploy, and maintain containerized workloads with AKS
• Manage Azure VMs, including sizing, patching, backup, and performance tuning
• Implement automated disaster recovery and backup solutions
• Monitor performance and security of landing zones and workloads
• Optimize security and efficiency through continuous improvements
• Manage secure access to applications with Azure Application Gateways, load balancers, and custom domains
• Monitor application performance and security with Azure Monitor and related tools
• Support Azure services and troubleshoot issues
• Implement governance controls like Azure policies for compliance
• Ensure workloads adhere to Zero Trust security principles
• Conduct audits of access controls and permissions
• Collaborate with security and compliance teams
• Contribute to secure product lifecycle management with CTO CCOE
• Communicate with stakeholders to gather requirements
• Identify automation opportunities and implement solutions
• Evaluate and integrate new Azure capabilities and security practices