How your CV stacks up
Upload your CV to see how well it fits this job role
?%
DevSecOps Engineer
DevSecOps Engineer
- Role Title: DevSecOps Engineer
- Duration: Contract (until 31/03/2027)
- Location: Hybrid (Bristol visits twice a month – predominantly remote)
- Rate: TBC (Umbrella inside IR35)
- Clearance: Active SC Clearance (desired), SC Eligible (required)
About the Role
We are seeking an experienced, client-facing DevSecOps Engineer to support the implementation and operation of DevSecOps practices across multiple digital products delivered as part of a wider CLIENT business and digital transformation programme, where Capgemini is the client’s prime Digital Delivery Partner.
The successful candidate will work closely with development, infrastructure, testing, and security teams to embed security, compliance, and automation throughout the software delivery lifecycle. Products will be deployed across the CLIENT digital estate, including:
- Microsoft Azure (CLIENTCloud ACE / i-ACE)
- AWS (CLIENTCloud ICE)
- Oracle Cloud Infrastructure (OCI / CLIENTCloud OCE)
This role requires strong hands-on experience with CI/CD pipelines, cloud-native tooling, security controls, and automation, alongside the ability to collaborate effectively with multi-disciplinary delivery teams.
Responsibilities
Support the implementation and continuous improvement of DevSecOps practices, including:
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
- Secure and automated CI/CD pipelines
- Security scanning integrated into build, test, and deployment workflows
- Vulnerability management and remediation activities
- Secrets management and identity/access controls
- Security policy implementation for workloads, container images, and infrastructure
- Observability, monitoring, logging, and audit capabilities
- Work alongside developers to promote secure-by-design engineering practices and ensure compliance with CLIENT security requirements
- Develop and maintain Infrastructure as Code (IaC) solutions across cloud environments
- Support incident response activities, patching cycles, and compliance reporting where required
- Create and maintain technical documentation, operational procedures, and runbooks within Confluence
- Contribute to the ongoing optimisation of DevSecOps tooling, processes, and platform reliability
Key Skills & Experience
Essential
- Proven experience as a DevSecOps Engineer within complex cloud-based delivery environments
- Hands-on experience across:
- CI/CD and GitOps (e.g., GitHub Actions, Argo CD, Argo Rollouts)
- Security and compliance tooling (e.g., Trivy, HashiCorp Vault, cert-manager)
- Containers and orchestration (e.g., Docker, Kubernetes, AWS EKS)
- Infrastructure as Code (e.g., Terraform)
- Observability platforms (e.g., Grafana, Loki)
- Scripting and automation (e.g., Python, Bash)
- Cloud and networking fundamentals (e.g., AWS IAM, S3, network policies)
- Experience delivering within the UK Government Digital Service (GDS) lifecycle on a public sector engagement
- Experience working within distributed and hybrid delivery teams
- Strong collaboration skills with developers, testers, infrastructure engineers, and security teams
- Effective communication skills with the ability to work directly with technical and non-technical stakeholders
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Highly Desirable
- Experience supporting DevSecOps practices across cloud environments hosted on the CLIENT digital estate, including:
- Microsoft Azure (CLIENTCloud ACE / i-ACE)
- AWS (CLIENTCloud ICE)
- Oracle Cloud Infrastructure (OCI / CLIENTCloud OCE)
- Experience working within large-scale digital transformation programmes in the public sector
All profiles will be reviewed against the required skills and experience. Due to the high number of applications, we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location