Principal DevSecOps Engineer

Principal DevSecOps Engineer - Permanent

Bristol Hybrid - 3 days per week on-site

£110,000-£125,000 + 5-10% bonus + pension + benefits Permanent

Build secure, scalable platforms that enable transformation.

We're looking for a Principal DevSecOps Engineer to lead the adoption and continuous improvement of DevSecOps practices across complex technology transformation programmes.

You'll combine hands-on engineering with technical leadership - embedding security, automation, governance and reliability throughout the path to live.

What you'll do

Design and continuously improve secure, automated CI/CD and GitOps pipelines
Embed security scanning, vulnerability management and secrets management into delivery workflows
Establish secure-by-design engineering practices and enforce security and technical standards
Lead Infrastructure as Code (IaC) practices across teams and environments
Drive observability, monitoring, logging and audit controls
Support incident response, patching, compliance reporting and technical debt remediation
Partner with developers and delivery teams to improve engineering quality and security
Document security processes, controls and operational runbooks
Provide technical leadership and help establish effective DevSecOps ways of working

What we're looking for

You'll be an experienced DevSecOps Lead or Principal Engineer with strong hands-on and leadership experience across:

CI/CD & GitOps - GitHub Actions, Argo CD, Argo Rollouts
Security & compliance - Trivy, vulnerability management, HashiCorp Vault, cert-manager
Containers & cloud - Docker, AWS EKS, AWS IAM, S3 and network policies
Infrastructure as Code - Terraform
Observability - Grafana, Loki
Automation - Python and Bash
Experience delivering within the UK Government Digital Service (GDS) lifecycle on a public sector engagement

Why join?

You'll work on complex, high-impact transformation programmes where engineering, security and technology come together.

You'll have access to extensive learning and development opportunities, professional certifications and flexible hybrid working - with the opportunity to shape DevSecOps practices across a growing technology environment.

Security Check (SC) clearance is required, including continuous UK residency for the last five years, alongside the relevant eligibility requirements.

Important: You must be a Sole UK National for this requirement.

Ready to shape the future of secure engineering?

If you're a senior DevSecOps professional who enjoys solving complex technical challenges, leading from the front and building secure engineering practices that scale, we'd love to hear from you.

Apply now.