Contract - Software & DevOps Engineer

Deloitte (UK); Alabama; On-site; USD 120,000 - 180,000; Full time

Job summary

Deloitte is seeking a skilled Software Engineer to work within the Associate (Contractor) Programme on cloud-native applications and secure software delivery. You will drive architectural decisions, code reviews, and CI/CD pipelines with a strong emphasis on SDL and security best practices.

Ideal candidates have 5+ years in enterprise software, deep knowledge of distributed systems, APIs, and experience with CI/CD and security tooling.

Qualifications

• 5+ years in enterprise software engineering.
• Deep understanding of distributed systems, microservices, APIs and design patterns.
• Extensive experience implementing and managing CI/CD pipelines (GitHub Actions, GitLab, Jenkins).
• Strong knowledge of Secure Development Lifecycle (SDL).
• Understanding of software supply chain security concepts (SBOMs, dependency management, vulnerability management).
• Preferred: Experience with SCA tools and DevSecOps; Knowledge of Zero Trust and policy-as-code.

Responsibilities

• Build scalable and secure applications based on cloud-native architectures.
• Lead code reviews and contribute to system design and technical strategy.
• Evaluate and integrate open-source technologies.
• Design and optimize CI/CD pipelines with automated security testing.
• Develop automation to support CI, testing and secure deployments.
• Champion and embed SDL practices across the organization.
• Conduct threat modeling and security design reviews, support remediation of findings.

Skills

5+ years experience

Distributed systems

APIs

Software design patterns

CI/CD pipelines

Secure Development Lifecycle

SBOMs & dependency management

DevSecOps (preferred)

Zero Trust (preferred)

Education

Bachelor's degree in CS/Software Eng

Tools

Docker

Kubernetes

AWS/Azure/Google Cloud

Job description

Working with the Deloitte Associate (Contractor) Programme means we can offer you the opportunity to work on a variation of industry and client related projects. Our aim is to retain the best talent and so when your project end date nears our team of Talent Community Advisors will be working with you to look at alternative projects within the firm that suit your experience should you wish to continue with Deloitte.

The Role

Responsibilities but not limited to;

• Software Engineering:
• Build scalable and secure applications based on cloud-native architectures.
• Lead code reviews and contribute to system design and technical strategy.
• Evaluate and integrate open-source technologies.
• DevSecOps & CI/CD:
• Design and optimize CI/CD pipelines, integrating automated security testing (e.g., code scanning, dependency analysis).
• Develop automation to support continuous integration, testing, and secure deployments.
• Secure Development Lifecycle (SDL):
• Champion and embed SDL practices throughout the organization.
• Conduct threat modeling, security design reviews, and support the remediation of security findings.

Essential Skills and Experience

• Experience: 5+ years in enterprise software engineering.
• Architecture: Deep understanding of distributed systems, microservices, APIs, and software design patterns.
• CI/CD: Extensive experience implementing and managing CI/CD pipelines (e.g., GitHub Actions, GitLab, Jenkins).
• Security:
• Strong knowledge of Secure Development Lifecycle (SDL) practices and secure coding.
• Understanding of software supply chain security concepts (SBOMs, dependency management, vulnerability management).
• (Preferred) Experience with Software Composition Analysis (SCA) tools and implementing DevSecOps.
• (Preferred) Knowledge of Zero Trust architecture and policy-as-code.

Technologies:

• Containerization: Docker and Kubernetes.
• Cloud Platforms: Familiarity with AWS, Azure, or Google Cloud.

Education

A Bachelor's degree in Computer Science, Software Engineering, or equivalent experience a related technical field is required.

IR35

As a means of managing tax, commercial and reputational risks, Deloitte prohibits the use of Associates through Personal Service Companies (‘PSCs’). All Associates must contract under PAYE arrangements through a Deloitte approved ‘Employment Company’ (aka ‘umbrella company.’)