Lead / Principal DevSecOps Engineer

Lead / Principal DevSecOps Engineer - PermanentJob Type: Permanent

Location: Hybrid – Bristol - 3 days per week on-siteSalary: £110,000–£125,000 + 5–10% bonus + pension + benefits🚀 Build secure, scalable platforms that enable transformation.We’re looking for a Principal DevSecOps Engineer to lead the adoption and continuous improvement of DevSecOps practices across complex technology transformation programmes.You’ll combine hands-on engineering with technical leadership — embedding security, automation, governance and reliability throughout the path to live.What you’ll do

• Design and continuously improve secure, automated CI/CD and GitOps pipelines
• Embed security scanning, vulnerability management and secrets management into delivery workflows
• Establish secure-by-design engineering practices and enforce security and technical standards
• Lead Infrastructure as Code (IaC) practices across teams and environments
• Drive observability, monitoring, logging and audit controls
• Support incident response, patching, compliance reporting and technical debt remediation
• Partner with developers and delivery teams to improve engineering quality and security
• Document security processes, controls and operational runbooks
• Provide technical leadership and help establish effective DevSecOps ways of workingWhat we’re looking forYou’ll be an experienced DevSecOps Lead or Principal Engineer with strong hands-on and leadership experience across:
• CI/CD & GitOps – GitHub Actions, Argo CD, Argo Rollouts
• Security & compliance – Trivy, vulnerability management, HashiCorp Vault, cert-manager
• Containers & cloud – Docker, AWS EKS, AWS IAM, S3 and network policies
• Infrastructure as Code – Terraform
• Observability – Grafana, Loki
• Automation – Python and Bash
• Experience delivering within the UK Government Digital Service (GDS) lifecycle on a public sector engagement🌟 Why join?You’ll work on complex, high-impact transformation programmes where engineering, security and technology come together.You’ll have access to extensive learning and development opportunities, professional certifications and flexible hybrid working — with the opportunity to shape DevSecOps practices across a growing technology environment.*You need to be a Sole UK national for this requirement*🔐 Security Check (SC) clearance is required, including continuous UK residency for the last five years, alongside the relevant eligibility requirements.Ready to shape the future of secure engineering?If you’re a senior DevSecOps professional who enjoys solving complex technical challenges, leading from the front and building secure engineering practices that scale, we’d love to hear from you.Apply now.