Lead DevSecOps Engineer
Ref: 92473_1752162930Lead DevSecOps Engineer required to work with a government department. This is an initial 6 month contract, paying £650 per day, inside IR35, hybrid working (2-3 days per week onsite in London)
You will have active SC clearance prior to commencing this assignment
Summary and Responsibilities:
As a Lead DevSecOps Engineer, you will ensure that security is built into every part of the development lifecycle, specifically ensuring that security tooling (native and non-native) is properly embedded into CI/CD pipelines. You will be part of transformation programmes including tech debt replacement and migration, embedding security to ensure seamless integration of new systems/ features and workflows.
You will be responsible for ensuring that the replacement systems are security compliant, adhering to standards such as Secure by Design and GovAssure, utilising a shift left mentality to fix problems before production. This is as part of highly complex legacy replacements involving approximately 90,000 users.
Essential Skills and Experience Required:
- Strong hands-on expertise in DevSecOps practices, particularly security automation in CI/CD and infrastructure-as-code pipelines.
- Deep understanding of modern DevOps tooling (e.g., GitHub Actions/ CircleCI, Terraform, Kubernetes, Docker) with secure configurations.
- Experience implementing security controls in cloud-native environments (e.g., AWS or Azure) including IAM, network policies, and container security.
- Proven track record of using tools such as Snyk, Trivy, Checkov, OPA/Gatekeeper/ OWASP ZAP, or similar to enforce pipeline and platform security.
- Familiarity with compliance requirements (e.g., NIST, ISO 27001, CIS Benchmarks) and their implementation via code.
- Ability to lead and mentor teams on secure coding, threat modelling, and secure architecture patterns.
- Experience with monitoring, logging, and security telemetry platforms (e.g., Prometheus, Loki, ELK, XDR/SIEM integrations).
Please apply should you meet the above criteria
Attenti Consulting is acting as an Employment Business in relation to this vacancy.