Qualifications

The ideal candidate will possess extensive hands-on experience in DevSecOps practices within cloud environments, with a proven track record of leading technical teams in complex projects. Key qualifications include expertise in:

• AWS
• Kubernetes/EKS
• Terraform
• GitHub Actions
• GitOps
• Argo CD
• Docker
• Vault
• Trivy
• cert-manager
• Grafana
• Loki
• Python
• Bash scripting

Candidates should demonstrate strong leadership capabilities, with prior experience in guiding cross-functional teams and managing large-scale security and automation initiatives.

Additionally, candidates must have significant experience working within UK Government or GDS delivery frameworks, showcasing their understanding of security standards and compliance requirements. Excellent stakeholder management and communication skills are essential to effectively liaise with technical teams, senior management, and external partners. A relevant security clearance, specifically an active SC clearance, is mandatory for this role.

Responsibilities

• Lead and embed DevSecOps engineering practices across multiple MOD digital products, ensuring security and automation are integral to the development process.
• Design, implement, and govern secure CI/CD and GitOps pipelines, promoting best practices in continuous integration and deployment.
• Integrate security scanning tools, vulnerability management processes, and compliance controls into the software delivery pipeline.
• Drive Infrastructure as Code initiatives using Terraform to ensure scalable, repeatable, and secure infrastructure deployment.
• Work with container orchestration platforms such as Kubernetes and Docker, including AWS EKS, to facilitate scalable deployment environments.
• Implement secrets management, identity, and access management solutions utilizing technologies like HashiCorp Vault.
• Establish observability frameworks, including monitoring, logging, and audit controls, to ensure system reliability and security.
• Develop secure-by-design engineering practices aligned with MOD security standards and policies.
• Coordinate efforts among DevSecOps engineers, developers, testers, and infrastructure teams to ensure seamless delivery and security compliance.
• Create and maintain security operational processes, technical standards, and runbooks to support ongoing operations and incident response activities.
• Support incident response, vulnerability patching, risk management, and compliance activities to maintain the integrity of digital assets.

Benefits

This role offers a competitive daily rate inside IR35, reflecting the seniority and critical nature of the position. Working remotely provides flexibility, enabling a healthy work-life balance while contributing to a high-profile government project. The successful candidate will have the opportunity to work on cutting-edge digital transformation initiatives within the defense sector, gaining valuable experience in secure cloud architectures and automation practices. Additionally, this role provides exposure to a broad range of cloud services and security frameworks, enhancing professional growth and expertise. The contract duration offers stability for at least six months, with potential extensions based on project requirements.

Equal Opportunity

CBSbutler is committed to promoting diversity and inclusion within its workforce. We believe that a diverse team fosters innovation and drives better outcomes. We welcome applications from all qualified candidates regardless of race, gender, age, disability, sexual orientation, religion, or any other characteristic protected by law. We are dedicated to creating an equitable environment where everyone has the opportunity to succeed and contribute to our shared goals.