Principal DevSecOps Engineer

Salary: £110,000 - 125,000 per year

Requirements:

• We are looking for an experienced DevSecOps Lead or Principal Engineer with strong hands-on and leadership experience.
• We need experience across CI/CD and GitOps, including GitHub Actions, Argo CD and Argo Rollouts.
• We need experience with security and compliance tools and practices, including Trivy, vulnerability management, HashiCorp Vault and cert-manager.
• We need experience with containers and cloud technologies, including Docker, AWS EKS, AWS IAM, S3 and network policies.
• We need Infrastructure as Code experience with Terraform.
• We need observability experience with Grafana and Loki.
• We need automation experience with Python and Bash.
• We need experience delivering within the UK Government Digital Service (GDS) lifecycle on a public sector engagement.
• Security Check (SC) clearance is required, including continuous UK residency for the last five years and the relevant eligibility requirements.
• You must be a Sole UK National for this requirement.

Responsibilities:

• Design and continuously improve secure, automated CI/CD and GitOps pipelines.
• Embed security scanning, vulnerability management and secrets management into delivery workflows.
• Establish secure-by-design engineering practices and enforce security and technical standards.
• Lead Infrastructure as Code (IaC) practices across teams and environments.
• Drive observability, monitoring, logging and audit controls.
• Support incident response, patching, compliance reporting and technical debt remediation.
• Partner with developers and delivery teams to improve engineering quality and security.
• Document security processes, controls and operational runbooks.
• Provide technical leadership and help establish effective DevSecOps ways of working.

Technologies:

• AWS
• Bash
• CI/CD
• Cloud
• DevSecOps
• Docker
• GitHub
• GitOps
• Grafana
• IAM
• Support
• Network
• Python
• Security
• Terraform
• DevOps

More:

We are recruiting for a Principal DevSecOps Engineer on a permanent basis in Bristol, working in a hybrid pattern with three days per week on-site. The role offers a salary of £110,000-£125,000 plus a 5-10% bonus, pension and benefits. We work on complex, high-impact transformation programmes where engineering, security and technology come together, and we offer extensive learning and development opportunities, professional certifications and flexible hybrid working, with the opportunity to shape DevSecOps practices across a growing technology environment.

last updated 40 week of 2026