Qualifications

The ideal candidate will possess extensive hands-on experience in DevSecOps practices and cloud engineering. Proven leadership in implementing security-focused DevOps pipelines is essential, along with a strong understanding of UK Government and GDS delivery standards. Candidates should demonstrate proficiency with a range of technologies including AWS Kubernetes/EKS, Terraform, GitHub Actions, GitOps, Argo CD, Docker, Vault, Trivy, cert-manager, Grafana, Loki, Python, and Bash scripting.

Furthermore, applicants must have a track record of working across distributed engineering teams, excellent stakeholder management skills, and the ability to communicate complex technical concepts effectively. Security clearance at the SC level is mandatory, and prior experience working within MOD or similar government environments will be advantageous.

Responsibilities

• Lead and embed DevSecOps engineering practices across multiple MOD digital products, ensuring security and compliance are integrated into all development processes.
• Design, implement, and govern secure CI/CD and GitOps pipelines to facilitate continuous integration and deployment across cloud environments.
• Integrate security scanning tools, vulnerability management systems, and compliance controls into the software delivery lifecycle.
• Drive Infrastructure as Code initiatives using Terraform to automate provisioning and management of cloud resources.
• Work with container orchestration platforms such as Kubernetes, Docker, and AWS EKS to deploy scalable and secure applications.
• Implement secrets management, identity, and access management solutions using technologies like HashiCorp Vault.
• Establish observability frameworks, including monitoring, logging, and audit controls, to ensure operational transparency and security.
• Develop and promote secure-by-design engineering practices aligned with MOD security standards and policies.
• Coordinate efforts among DevSecOps engineers, developers, testers, and infrastructure teams to achieve project objectives.
• Create, maintain, and update security policies, technical standards, and operational runbooks to ensure ongoing compliance and best practices.
• Support incident response activities, including patching, risk assessment, and compliance audits, to mitigate security threats effectively.

Benefits

While this is a contract role, it offers several compelling benefits including the opportunity to work on high-impact national security projects within the MOD environment. The role provides flexibility with remote working arrangements, competitive daily rates, and the chance to collaborate with leading technology and defense professionals. You will gain valuable experience working with cutting-edge cloud technologies and security practices in a government setting. Additionally, the position offers professional development opportunities and the ability to contribute to critical national infrastructure projects that have a tangible impact on national security.

Equal Opportunity

CBSbutler Holdings Limited is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees and applicants. We do not discriminate based on race, religion, gender, sexual orientation, age, disability, or any other protected characteristic. We encourage individuals from all backgrounds to apply and join our team, ensuring a workplace that values and respects every individual’s unique contributions.