Proven active SC Cleared Lead DevSecOps Engineer required for a digital transformation project. You will be responsible for ensuring that the replacement systems are security compliant, adhering to standards such as Secure by Design and GovAssure, utilising a shift left mentality to fix problems before production. This is part of a highly complex legacy replacement involving approximately 90,000 users.
The ideal candidate will have recently completed a similar role for another large Government Department on a secure project.

ESSENTIAL SKILLS REQUIRED

Strong hands-on expertise in DevSecOps practices, particularly security automation in CI/CD and infrastructure-as-code pipelines.
Deep understanding of modern DevOps tooling (e.g., GitHub Actions/ CircleCI, Terraform, Kubernetes, Docker) with secure configurations.
Experience implementing security controls in cloud-native environments (e.g., AWS or Azure), including IAM, network policies, and container security.
Proven track record of using tools such as Snyk, Trivy, Checkov, OPA/Gatekeeper/ OWASP ZAP, or similar to enforce pipeline and platform security.
Familiarity with compliance requirements (e.g., NIST, ISO 27001, CIS Benchmarks) and their implementation via code.
Ability to lead and mentor teams on secure coding, threat modelling, and secure architecture patterns.
Experience with monitoring, logging, and security telemetry platforms (e.g., Prometheus, Loki, ELK, XDR/SIEM integrations).

MINORITIES, WOMEN, LGBTQ+ CANDIDATES, AND INDIVIDUALS WITH DISABILITIES ARE ENCOURAGED TO APPLY.

Interviews will take place shortly, so please apply immediately to be considered for this exciting contract opportunity or call us to discuss this role further.

Please refer the Job description for details