Undisclosed
DevX Build Pipeline/DevOps Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Role Title: DevX Build Pipeline/DevOps Engineer
Duration
Contract to run until 30/11/2026
Location
Hybrid. Sheffield, 3 days onsite with additional need to travel to other offices within the UK
Rate
Up to £538.20 p/d Umbrella inside IR35
Role purpose / summary
Own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supplychain integrity across teams.
Core Responsibilities
- Design and maintain Groovy pipeline steps (build, test, package, scan, deploy).
- Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container).
- Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch).
- Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling).
- Refactor legacy scripts (remove global state, consolidate hashing, standardize templates).
- Document ci-config.yaml standards and usage patterns.
- Mentor engineers on secure pipeline development and supply-chain practices. Troubleshoot and prevent pipeline incidents.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Essential Skills
- 7+ years engineering; 3+ in CI/CD platform or DevSecOps.
- Strong Jenkins + Groovy shared library expertise.
- Advanced Python automation (JSON/YAML processing, tooling scripts).
- Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata.
- Supply-chain security (SLSA, CycloneDX SBOM, digests).
- Experience with SonarQube, Sonatype IQ, container and SAST scanning.
- Proven performance tuning (caching, parallelization, dependency pruning). Compliance Awareness.
Nice-to-Have
- Artifact signing / attestations (cosign, OCI).
- Terraform module and Helm chart publishing patterns.
- GitOps or release automation experience.
- GCP/AWS cloud experience
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Soft Skills
- Precise communicator documentation discipline.
- Ownership mindset, able to operate with minimal supervision.
Deliverables (First 30 Days)
- Current state assessment: audit shared library structure with view to understand all building blocks and modules.
- Support requests: work on user's reported issues to get to know critical parts of the pipeline and various configuration options.
- Identify bugs, classify them and develop hot fixes.
- Feature requests: deliver 2 x small features/improvements to pipeline code.
All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills