Senior DevSecOps Engineer

Senior DevSecOps/AWS Lead

Salary: £90,000+ depending on experience
Location: UK - Hybrid
Working pattern: Approximately 2-3 days per week in an office
Employment type: Permanent

We're looking for an experienced Senior DevSecOps/AWS Lead to take technical ownership across cloud platforms and a major public sector delivery programme.

This is a senior, hands-on position with responsibility for setting technical direction, leading and mentoring engineers, and ensuring AWS environments are secure, scalable and built around strong DevSecOps principles. You'll work closely with architects, engineering teams and senior stakeholders while remaining close to the technology.

Key responsibilities

• Provide technical leadership across AWS and DevSecOps engineering

• Own and shape the technical direction of secure AWS environments

• Design and improve secure CI/CD pipelines

• Implement Infrastructure as Code using Terraform

• Embed security-by-design across infrastructure and application deployment

• Implement AWS security controls across IAM, networking and security tooling

• Support vulnerability management, monitoring and compliance

• Lead and mentor engineers, providing technical guidance and assurance

• Work closely with architects, programme leads and senior stakeholders

• Support change, release and controlled promotion processes

Essential experience

• Strong hands-on AWS engineering and architecture experience

• Genuine DevSecOps experience within complex environments

• Strong Terraform/Infrastructure as Code capability

• CI/CD pipelines and automation

• AWS IAM, networking and security controls

• Secure-by-design principles and cloud security

• Experience leading or mentoring technical teams

• Experience working within government, financial services or another regulated environment

Desirable experience

• Kubernetes, EKS or ECS

• AWS Security Hub, GuardDuty, Inspector, Config or Shield

• SAST, DAST and container security/scanning

• NCSC principles or government security standards

• ForgeRock or wider IAM platforms such as Okta, Auth0 or Ping Identity

• AWS landing zones

• Azure

• Python or Bash

• Audit, assurance and security evidence

• Existing government security clearance

This opportunity would suit an experienced AWS/DevSecOps professional who wants to combine hands-on technical delivery with leadership and genuine ownership of technical direction.