Anticipated Contract End Date/Length: November 30, 2026
Work Set Up: Hybrid (3 days per week in office)
Our client in the Information Technology and Services industry is looking for a DevOps Engineer / Build Pipeline Engineer to own and evolve a Jenkins Shared Library powering multi-language builds across Java/Maven, Node/NPM, Python, Helm, Terraform, and container technologies. The successful candidate will deliver fast, secure, provenance-rich pipelines using SLSA, SBOMs, and artifact digests while strengthening software supply chain integrity across engineering teams.
What you will do:
- Design and maintain Groovy pipeline steps covering build, test, package, scan, and deployment activities.
- Extend Python tooling for SLSA provenance, SBOM generation, hash and digest accuracy, and security scan aggregation.
- Integrate and maintain security scanning capabilities across SonarQube, Sonatype IQ, SAST, and container scanning.
- Optimise pipeline performance through parallel builds, caching, dependency prefetching, and scope-reduced BOMs.
- Ensure artifact integrity through accurate SHA1/SHA256 mapping, reproducible inputs, and evidence modelling.
- Refactor legacy scripts by removing global state, consolidating hashing, and standardising pipeline templates.
- Document ci-config.yaml standards, configuration requirements, and usage patterns.
- Mentor engineers on secure pipeline development and software supply chain practices.
- Troubleshoot pipeline incidents and implement improvements to prevent recurring issues.
- Assess the current shared library structure and understand supported building blocks and modules.
- Investigate user-reported issues to develop a strong understanding of critical pipeline components and configuration options.
- Identify and classify pipeline bugs and develop appropriate hot fixes.
- Deliver at least two small pipeline features or improvements during the initial 30-day period.
- Apply secure and compliant CI/CD practices across engineering environments.
- Bring 7+ years of software engineering experience, including at least 3 years working with CI/CD platforms or DevSecOps.
- Demonstrate strong Jenkins and Groovy Shared Library expertise.
- Demonstrate advanced Python automation skills, including JSON/YAML processing and tooling development.
- Bring deep knowledge of Maven, NPM, and Python packaging, with exposure to Helm, Terraform, and container image metadata.
- Demonstrate strong understanding of software supply chain security practices, including SLSA, CycloneDX SBOMs, and artifact digests.
- Bring hands-on experience with SonarQube, Sonatype IQ, container scanning, and SAST solutions.
- Demonstrate proven experience optimising pipeline performance through caching, parallelisation, dependency pruning, and similar techniques.
- Demonstrate awareness of security, compliance, and software supply chain requirements.
- Bring experience with artifact signing and attestations using technologies such as cosign and OCI as an advantage.
- Demonstrate experience publishing Terraform modules and Helm charts as an advantage.
- Bring GitOps or release automation experience as an advantage.
- Demonstrate GCP or AWS cloud experience as an advantage.
- Demonstrate relevant Python and Jenkins/Tekton experience through previous engineering projects.
- Demonstrate precise communication and strong documentation discipline.
- Demonstrate an ownership mindset and the ability to operate effectively with minimal supervision.
Candidates must be legally authorized to live and work in the country where the position is based, without requiring employer sponsorship.
HelloKindred is committed to fair, transparent, and inclusive hiring practices. We assess candidates based on skills, experience, and role-related requirements.
We appreciate your interest in this opportunity. While we review every application carefully, only candidates selected for an interview will be contacted.
HelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, colour, religion, sex, gender identity or expression, sexual orientation, age, national origin, disability, veteran status, or any other protected characteristic under applicable law.