Principal DevSecOps Engineer - London

Principal DevSecOps Engineer – Permanent London | Hybrid – 3 days per week on-site £110,000–£125,000 + 5–10% bonus + pension + benefits | Permanent 🚀 Build secure, scalable platforms that enable transformation We're looking for a Principal DevSecOps Engineer to lead the adoption and continuous improvement of DevSecOps practices across complex technology transformation programmes. You'll combine hands-on engineering with technical leadership, embedding security, automation, governance and reliability throughout the path to live. The role:

• Design and continuously improve secure, automated CI/CD and GitOps pipelines
• Embed security scanning, vulnerability management and secrets management into delivery workflows
• Establish secure-by-design engineering practices and enforce security and technical standards
• Lead Infrastructure as Code (IaC) practices across teams and environments
• Drive observability, monitoring, logging and audit controls
• Support incident response, patching, compliance reporting and technical debt remediation
• Partner with developers and delivery teams to improve engineering quality and security
• Document security processes, controls and operational runbooks
• Provide technical leadership and help establish effective DevSecOps ways of working Skills and Experience we're looking for: You'll be an experienced DevSecOps Lead or Principal Engineer with strong hands-on engineering and technical leadership experience across:
• CI/CD & GitOps: GitHub Actions, Argo CD, Argo Rollouts
• Security & Compliance: Trivy, vulnerability management, HashiCorp Vault, cert-manager
• Containers & Cloud: Docker, AWS EKS, AWS IAM, S3 and network policies
• Infrastructure as Code: Terraform
• Observability: Grafana, Loki
• Automation: Python and Bash
• Experience delivering within the UK Government Digital Service (GDS) lifecycle on a public sector engagement 🌟 Why join? You'll work on complex, high-impact transformation programmes where engineering, security and technology come together. You'll have access to extensive learning and development opportunities, professional certifications and flexible hybrid working, with the opportunity to shape DevSecOps practices across a growing technology environment. 🔐 Security Clearance Security Check (SC) clearance is required. Candidates must meet the relevant eligibility requirements, including continuous UK residency for the last five years. This role requires candidates to be sole UK nationals. Ready to shape the future of secure engineering? Apply now.