DevSecOps Engineer

What you'll be doing

• Deploying and supporting containerised applications on Red Hat OpenShift and Kubernetes.
• Building and managing secure CI/CD pipelines and embedding DevSecOps practices.
• Developing Infrastructure as Code using Terraform, Ansible or similar tools.
• Automating platform provisioning, configuration and deployment.
• Implementing platform security, hardening, vulnerability management and compliance controls.
• Establishing monitoring, logging, alerting and observability capabilities.
• Supporting incident resolution, root cause analysis and continuous platform improvement.
• Working collaboratively across technical and delivery teams and producing clear technical documentation and runbooks.

We're looking for someone with

• Strong hands-on experience with Red Hat OpenShift, Kubernetes and container technologies.
• Proven DevSecOps or Platform Engineering experience in secure environments.
• Experience with CI/CD tooling such as GitLab, Jenkins, Azure DevOps or GitHub Actions.
• Strong Infrastructure as Code skills, ideally Terraform and/or Ansible.
• Linux administration experience, preferably RHEL.
• Experience integrating security controls and vulnerability scanning into delivery pipelines.
• Experience with monitoring and observability tools such as Prometheus, Grafana, Elastic or Splunk.
• Scripting and automation skills using Bash, Python or PowerShell.
• Experience working in Agile delivery environments.

It would be great if you also have

• Experience with OpenShift ACM/ACS, Argo CD, Service Mesh, cloud platforms, HashiCorp Vault or Defence/Government security standards such as NCSC Secure by Design, NIST or JSP 440.
• Due to the level of sensitivity of this programme, you must hold active SC security clearance and be a Sole UK National.

Why Pigment?

You'll work across high-impact, complex programmes where your work matters.

At Pigment, collaboration is at the heart of everything we do; we value people who can challenge and deliver while working seamlessly across a blended delivery team.