Qualifications

The ideal candidate will possess a strong technical background with hands-on experience in DevSecOps practices and cloud engineering. Proven leadership in implementing secure CI/CD pipelines and infrastructure automation is essential. Experience working within UK Government or GDS delivery environments is highly desirable, as is familiarity with security standards specific to defense and government sectors. Candidates should demonstrate excellent stakeholder management and communication skills, capable of coordinating across distributed teams effectively.

Technical qualifications include proficiency in AWS Kubernetes/EKS, Terraform, GitHub Actions, GitOps tools such as Argo CD, Docker, Vault, Trivy, cert-manager, Grafana, Loki, Python, and Bash scripting. A solid understanding of security controls, vulnerability management, and compliance within cloud environments is required. Active SC security clearance is mandatory for this role.

Responsibilities

• Lead and embed DevSecOps engineering practices across multiple MOD digital products, ensuring security and automation are integral to the development process.
• Design, implement, and govern secure CI/CD and GitOps pipelines to streamline software deployment across cloud platforms.
• Integrate security scanning tools, vulnerability management processes, and compliance controls into the development lifecycle.
• Drive Infrastructure as Code initiatives using Terraform to enable scalable and repeatable infrastructure deployment.
• Work with container orchestration platforms such as Kubernetes and Docker, including AWS EKS, to manage containerized applications securely.
• Implement secrets management, identity, and access controls utilizing technologies like HashiCorp Vault.
• Establish observability, monitoring, logging, and audit controls to ensure system reliability and security.
• Develop secure-by-design engineering practices aligned with MOD security requirements and standards.
• Coordinate efforts among DevSecOps engineers, developers, testers, and infrastructure teams to promote best practices and continuous improvement.
• Create and maintain comprehensive security processes, technical standards, and operational runbooks to support ongoing operations.
• Support incident response, patch management, risk assessment, and compliance activities to uphold security posture.

Benefits

This role offers the opportunity to work on a high-profile government project with significant impact on national security. The position provides a competitive daily rate inside IR35, with the flexibility of remote working. You will gain experience working with cutting-edge cloud technologies and secure digital transformation initiatives within the defence sector. The contract duration allows for substantial involvement in strategic security and automation practices, enhancing your professional growth and expertise in the field. Additionally, you will be part of a collaborative team dedicated to delivering innovative and secure digital solutions for the UK MOD.

Equal Opportunity

CBSbutler Holdings Limited trading as CBSbutler is committed to fostering an inclusive environment where all employees and applicants are treated with respect and fairness. We are an equal opportunity employer and do not discriminate based on race, ethnicity, gender, age, disability, sexual orientation, religion, or any other protected characteristic. We believe diversity enhances our ability to serve our clients and support our employees, and we strive to create a workplace that reflects these values.