DevOps Engineer

Job Title\: DevOps Engineer

Job Location\: Preston, Portsmouth, Barrow-In-Furness, Christchurch, Yeovil, Frimley or Glasgow -. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role.

Referral Scheme Bonus\: £1,000

Grade\: GG10

You’re expected to have completed 12 months in role prior to applying for an advertised vacancy and you should also discuss the internal opportunity with your line manager to ensure sustained business continuity and to further support your career development.

We know there may be exceptional individual circumstances that impact this, in the first instance please discuss this with your line manager.

If you don’t feel you can talk to your Line Manager, you can contact your HRBP.

PLEASE NOTE Should you be invited for interview; you acknowledge that the Recruitment team will contact you and your line manager regarding your application for this opportunity.

Role Description\:

This role focuses on designing and implementing GitLab‑based CI/CD pipelines to deploy containerised services into AKS, while maintaining robust Docker image workflows and secure internal registry practices. You will define and manage AKS cluster configurations, ensure scalable workloads, and build Terraform modules aligned with Azure Landing Zone standards. Strong cloud engineering fundamentals and an automation‑first mindset are essential.

You will manage secrets and access through Azure Key Vault and Azure AD, support hybrid connectivity using GreenLink, and collaborate closely with MLOps and Data Engineering teams to deliver reproducible, auditable infrastructure. The role also includes monitoring system health using tools such as Azure Monitor, Prometheus, and Grafana

Core Duties\:

• Designing and implementing GitLab-based CI/CD pipelines for deploying containerised services to AKS
• Building and maintaining Dockerfiles and container image workflows, pushing to internal container registries
• Defining and managing AKS cluster configurations, ensuring secure and scalable workloads
• Writing and maintaining Terraform modules for provisioning cloud infrastructure in line with Azure Landing Zone standards
• Managing secrets, configuration, and access using Azure Key Vault and Azure AD
• Ensuring connectivity between on-prem services and Azure cloud infrastructure using GreenLink and hybrid networking
• Collaborating with MLOps and Data Engineers to ensure reproducible, reliable, and auditable infrastructure across environments
• Monitoring system health, logging, and metrics using platform observability tools (e.g. Azure Monitor, Prometheus, Grafana where applicable)

Essential Skills\:

• You will have experience of writing, maintaining and debugging CI/CD pipelines, ideally in GitLab CI
• You will have experience of deploying and running applications on Kubernetes using Helm, ideally on Red Hat OpenShift
• You will have experience of GitOps delivery, ideally with Argo CD, where every change reaches production through version control
• Experience of building, scanning and maintaining container images and managing them through registries such as Harbor or Nexus
• Understanding of secure deployment, including secrets management (such as HashiCorp Vault), least privilege access and single sign-on, ideally in restricted or air gapped environments

• Experience of operating and troubleshooting services in production, using monitoring and logging tools such as Prometheus, Grafana and Loki

The Shared Services Data & Analytics team\:

The Shared Services Data & Analytics Team is at the heart of our company data landscape, bringing together data from our global operations and generating a broad range of insights to inform key business decisions.

Why BAE Systems?

Here you’ll build a career with purpose and limitless possibilities. With lifelong learning and meaningful work - this is a place where you can grow your career with confidence and be empowered to be your best. You’ll be recognised for your contribution and enjoy rewards tailored to what’s most important to you and your family - support for your financial and personal wellbeing, as well as a balanced lifestyle. In an environment embracing sustainable ways of working and with a strong sense of shared purpose, our supportive culture is a place you can feel you belong and proud of the difference you make.

We welcome applications from all suitably qualified people, who are BAE Systems employees and have been in their current role for 12 months or longer.

A place where everyone can thrive\:

We’re committed to building an inclusive workplace where everyone feels valued and supported. We know that a diversity of backgrounds, perspectives and experiences strengthens our teams and is vital to the work we do.

Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks.