DevSecOps Engineer – SC Cleared
Whitehall Resources currently require an experienced DevSecOps Engineer to work with a key client
*Please not this role falls inside ir35 and requires SC Clearance*
This role requires deep expertise in CI/CD pipelines, delivery workflows and security tooling across these cloud environments, alongside strong collaboration with developers, DevSecOps engineers, infrastructure engineers and test teams.
Key Responsibilities
- Design, implement, document and continuously improve DevSecOps practices across the delivery teams, including:
- Secure, automated CI/CD pipelines
- Security scanning integrated into build, test and deployment workflows
- Vulnerability lifecycle management, including allowlist processes and risk acceptance where required
- Secrets management and identity/access management
- Policy enforcement for workloads, container images and infrastructure
- Observability, monitoring, logging and audit controls
- Partner with developers to embed secure-by-design engineering and ensure compliance with security standards.
- Enable and govern Infrastructure as Code (IaC) practices across teams and environments.
- Contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured and actions tracked.
- Document security processes, controls and operational runbooks in Confluence.
Key Skills and Experience
- Proven experience as a DevSecOps Lead, establishing and operating DevSecOps ways of working and associated tooling across the following areas (hands-on and leading others):
- CI/CD and GitOps (e.g. GitHub Actions, Argo CD, Argo Rollouts)
- Security and compliance tooling (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager)
- Containers and orchestration (e.g. Docker, AWS EKS)
- Infrastructure as Code (e.g. Terraform)
- Observability (e.g. Grafana, Loki)
- Scripting and automation (e.g. Python, Bash)
- Cloud and networking fundamentals (e.g. AWS IAM, S3, network policies)
- Experience delivering within the UK Government Digital Service (GDS) lifecycle on a public sector engagement.
- Experience working with and leading distributed and hybrid teams.
- Demonstrated ability to work across cross-functional teams, particularly with developers, testers and DevSecOps engineers.
- Strong facilitation, communication and stakeholder management skills, with experience influencing at multiple levels.
All of our opportunities require that applicants are eligible to work in the specified country/location, unless otherwise stated in the job description.
Whitehall Resources are an equal opportunities employer who value a diverse and inclusive working environment. All qualified applicants will receive consideration for employment without regard to race, religion, gender identity or expression, sexual orientation, national origin, pregnancy, disability, age, veteran status, or other characteristics.