Sanderson
Senior DevSecOps Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Senior DevSecOps Engineer
AWS | EKS | Platform Security | Financial Services
📍 Location: London/Hybrid
💰 Day Rate: Up to £650 (OUTSIDE IR35)
📄 Contract: Initial 6 Months
We're supporting a major financial services organisation delivering a next-generation cloud platform that will underpin multiple strategic programmes and engineering teams. As a result, we're looking for a hands-on DevSecOps Engineer to join the platform security function and help build the guardrails, controls and automation that allow product and engineering teams to scale securely by default.
This is an engineering-first role focused on AWS, Kubernetes, CI/CD security and platform protection. You'll work alongside Platform Engineering, Developer Platform and Security Architecture teams to ensure security is embedded into the platform rather than bolted on afterwards.
What You'll Be Doing
- Engineering and maintaining security controls across a multi-tenant AWS platform
- Implementing and managing IAM controls including SCPs, Permission Boundaries and ABAC
- Designing secure workload identity and tenant isolation controls
- Embedding security into CI/CD delivery pipelines
- Implementing container, IaC, secrets and software composition scanning
- Building software supply chain security controls including image signing, verification and SBOM generation
- Developing Policy-as-Code controls using OPA, Rego, Kyverno or similar technologies
- Securing and hardening EKS environments through RBAC, Network Policies and Admission Controllers
- Supporting mTLS, PKI and service-to-service authentication initiatives
- Driving remediation of security findings and penetration test outcomes
- Creating reusable security modules, patterns and golden paths for engineering teams
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Essential Experience
- Proven experience within DevSecOps, Cloud Security Engineering or Platform Security
- Strong AWS security expertise, including IAM, SCPs, Permission Boundaries and ABAC
- Commercial experience securing Kubernetes environments, ideally EKS
- Terraform and Infrastructure-as-Code experience
- Building security controls into CI/CD pipelines
- Experience with workload identity, PKI and mTLS
- Strong understanding of software supply chain security
- Scripting or development capability using Python, Go or similar
- Ability to work effectively with engineers, platform teams and security architects
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable Experience
- Istio and Service Mesh security
- AWS Private CA and IAM Roles Anywhere
- Harness CI/CD
- OPA, Gatekeeper, Kyverno or OSCAL
- Sigstore, Cosign, SLSA and SBOM tooling
- Internal Developer Platform (IDP) security
- AWS Security Specialty, CKS, CISSP or equivalent certifications
- Experience within regulated financial services environments
Why Apply?
This is an opportunity to shape the security foundations of a major enterprise platform operating at significant scale. You'll be working on modern cloud-native security challenges across AWS, Kubernetes, platform engineering and software supply chain security, helping define the controls and guardrails that every engineering team will rely upon.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location