How your CV stacks up
1Upload CV
2Analyse CV
3Improve CV
Upload your CV to see how well it fits this job role
?%
Lead DevSecOps Engineer
Lead DevSecOps Engineer
Team Overview
We’re looking for a Lead DevSecOps Engineer to join our growing team.
This role reports into Jordan Dinsdale, our Senior Director of Platform Engineering.
This team is responsible for ensuring the operational integrity, release governance, and stakeholder alignment for the global platforms deployed in the UK regions. Acting as a bridge between regional and global teams, this role drives platform reliability, compliance, and continuous improvement through technical leadership and process excellence.
Role Overview and Core Responsibilities
Daily Duties
Release & Deployment Management
- Lead the regional execution of all release types (major, minor, emergency) through automated CI/CD pipelines, ensuring timely and high-quality deployments.
- Coordinate with Global Platform testers to oversee post-deployment validation, identifying, documenting, and resolving issues efficiently.
- Support and deputise for the Operations and Technical Release Manager in managing the full CAB ticket lifecycle, maintaining robust deployment traceability and compliance.
- Collaborate with the Operations and Technical Release Manager to lead, manage, and prioritise Kanban workflows, driving effective tracking and continuous improvement of release processes.
- Facilitate cross-functional coordination of development and change activities across the UK region, ensuring alignment with business objectives and minimising disruptions.
- Champion continuous improvement by analysing release outcomes, gathering feedback, and implementing process enhancements.
- Communicate release status and risks to stakeholders, ensuring transparency and proactive issue resolution.
Testing & Change Management
- Coordinate regression testing of changes to Global Business Platforms deployed in the UK region, in collaboration with Global Platform testers, ensuring thorough validation and documentation.
- Act as a key liaison to the Operations and Technical Release Manager, leading coordination between global and UK teams for future development, maintenance, and change activities, aligning objectives and minimising risks.
- Facilitate effective communication between global and UK teams, ensuring testing outcomes, risks, and dependencies are documented and addressed.
- Drive continuous improvement in testing and coordination processes by gathering feedback, identifying bottlenecks, and implementing best practices.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Platform Operations & Monitoring
- Provide technical leadership for the operational management of Global Business Platforms deployed in the UK region, ensuring compliance with SLAs, SLOs, RTOs, and other service commitments.
- Oversee incident management, monitoring, and escalation processes to maintain platform stability and minimise disruptions, including participation in a 24x7 out-of-hours support rota.
- Collaborate with the Operations and Technical Release Manager to produce and analyse reports on platform availability, performance, and capacity, supporting data-driven planning.
- Drive continuous improvement in operational processes, optimising platform reliability.
Incident & Problem Management
- Provide technical leadership in troubleshooting and resolving regional issues with Global Business Platforms, ensuring rapid service restoration and minimal business disruption.
- Technically lead critical and high-severity incident response, acting as the primary technical representative during incident bridges and ensuring clear communication and resolution.
- Coordinate and participate in post-incident reviews (PIRs), driving corrective actions across global and regional teams.
- Analyse incident data to identify root causes, predict future issues, and implement preventative controls.
- Document incident outcomes and share lessons learned to enhance team resilience and knowledge.
Risk, Compliance & Governance
- Lead the identification, assessment, and management of risks and issues related to Global Business Platforms, ensuring proactive mitigation and platform stability.
- Oversee compliance and audit activities for deployed platforms, ensuring adherence to regulatory requirements.
- Collaborate with risk, compliance, and audit stakeholders to address findings and improve processes.
- Monitor evolving risks and regulatory changes, adapting controls for compliance.
Required Knowledge and Experience
Essential Skills & Experience
- A track record of years of experience in technical leadership roles within cloud-native, containerised environments, delivering complex solutions at scale.
- Deep expertise in Kubernetes, managing and supporting GKE (Google Kubernetes Engine) clusters and containers in production, with advanced Helm chart proficiency.
- Strong background in GCP cloud networking, load balancing, traffic management, and Google Cloud Storage (GCS), including complex network architecture troubleshooting.
- Comprehensive knowledge of GCP compute services, administering and maintaining Dataproc clusters.
- Hands-on experience with Wiz for Cloud Native Application Protection and container security, including policy definition and incident response.
- Good understanding of Cloudflare.
- Significant experience with PostgreSQL for database design, optimisation, and high-availability management, along with Redis for session storage.
- Proven ability to design and support Kafka-based data streaming architectures.
- Expertise in Identity and Access Management (IAM), integrating Ping or Keycloak.
- In-depth experience with Kong APIM for API lifecycle management and governance.
- Strong monitoring and observability skills, including GCP Native Observability, Prometheus, Grafana, and OpenTelemetry alerts.
- Demonstrated leadership in CI/CD pipeline management (Harness), including Terraform for Infrastructure-as-Code (IaC) integrations.
- Experience with secret and sensitive data management using HashiCorp Vault.
- Solid grasp of application security best practices, including CheckMarxOne integrations and findings.
- Ability to translate architectural blueprints into detailed, low-level designs.
- Excellent communication, mentoring, and stakeholder management skills, passionate about team development and technical excellence.
- Ability to collaborate effectively with cross-functional teams for scalable, secure, and business-aligned solutions.
- Working knowledge of programming languages: HTML5, SAS, and iOS.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Preferred Qualifications:
- GCP Cloud Engineer
- GCP DevOps Engineer
- GCP Security Engineer
- GCP Database Engineer
- HashiCorp Terraform Associate
- Kubernetes and Cloud Native Associate (KCNA)
- Certified Kubernetes Administrator (CKA)
About TransUnion
At TransUnion, we empower our Workforce for Good, enabling our people to grow, innovate, and make a real, positive impact on communities and customers. We prioritise:
- Work/life flexibility
- Resources for global collaboration
- Professional and personal growth
Join us to work with great people, pioneering products, and cutting-edge technology.
Job Title:
Advisor, Software Development
Trusted by 25,000+ job seekers
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Kubernetes
GKE
GCP
Cloud Networking
PostgreSQL
Redis
Kafka
IAM
Kong APIM
CI/CD
Terraform
HashiCorp Vault
Application Security
Cloudflare
Monitoring
Observability
Location