Staff DevSecOps Engineer

What to expect

The Platform Engineering team builds, secures and operates scalable infrastructure supporting cloud-managed SaaS products with on-premises components deployed at customer sites.

As our Staff DevSecOps Engineer, you will provide the technical leadership for our software factory, defining how software is built, secured and released across the organisation. You will own the roadmap, architecture and tooling that enable every engineering team to deliver software securely, consistently and at scale, while remaining hands-on with automation, infrastructure and platform engineering.

Working closely with Architecture, Site Reliability Engineering, Cloud Operations and Product Development, you will drive an automation-first culture where secure software delivery, developer experience and operational excellence are embedded into every stage of the software lifecycle.

• Define and evolve the software factory, including CI/CD platforms, release engineering, developer tooling, Infrastructure as Code, dependency management and software supply-chain security.

• Deliver secure-by-default engineering practices through automated security controls, policy enforcement, vulnerability management, compliance automation and AI-driven workflows.

• Mentor engineers, establish engineering standards and collaborate across technical teams to deliver scalable, secure and highly automated development platforms.

What you'll be doing

You will lead the design, implementation and operation of the organisation's DevSecOps platform, ensuring software moves securely and efficiently from commit to production. You will develop reusable CI/CD pipelines, Infrastructure as Code modules and self-service developer capabilities that improve productivity whilst maintaining the highest security standards.

You will own release management, dependency and supply-chain security, security operations and hybrid infrastructure consistency across cloud and on-premises environments. You will also drive the adoption of agentic automation and AI-enabled workflows to reduce manual effort, improve operational efficiency and enhance software delivery.

• Own the software-factory roadmap, CI/CD platform, release engineering, Infrastructure as Code, internal developer platform and software supply-chain security.

• Embed security throughout the delivery pipeline through automated scanning, policy enforcement, vulnerability management, secrets management and continuous compliance.

• Develop agentic automation for pipeline operations, dependency management, release processes and operational support, while providing technical leadership, mentoring and engineering governance.

What you'll bring

You are an experienced DevSecOps or Platform Engineering leader with more than eight years of production engineering experience and recent hands-on responsibility for building and operating enterprise-scale CI/CD platforms.

You have designed production Infrastructure as Code, embedded security into delivery pipelines and delivered measurable improvements across software delivery, release management, dependency governance or vulnerability remediation. You are passionate about automation and continuously removing manual effort through tooling, scripting and intelligent workflows.

• 8+ years of production engineering experience with recent hands-on responsibility for enterprise-scale CI/CD platforms, Infrastructure as Code and production automation.

• Proven experience embedding security into software delivery through automated scanning, policy enforcement, vulnerability management and measurable operational improvements.

• Strong scripting and automation skills, with a demonstrated ability to simplify complex operational processes through reusable tooling and automation.

You'll be a great fit with

You have deep expertise in modern software supply-chain security, internal developer platforms and secure software delivery. You understand how to balance developer productivity with governance, compliance and operational resilience, while creating platforms that engineering teams enjoy using.

You bring practical experience of AI-enabled software delivery, modern release engineering and cloud-native platform design, with a passion for building secure, scalable and highly automated engineering ecosystems.

• Proven expertise in software supply-chain security, including artefact signing, Software Bills of Materials (SBOMs), provenance and SLSA principles.

• Experience designing internal developer platforms, self-service engineering capabilities and release management processes, including expedited production releases.

• Hands-on experience with agentic automation, AI or LLM security, and intelligent workflow orchestration within modern DevSecOps environments.