Lead DevSecOps Engineer (SC CLEARED) - Inside IR35

SC CLEARED CANDIDATES REQUIRED

Location: Remote with adhok travel to Leeds or london

Rate: 475.00£/day inside IR35

Start date: ASAP

Length: 6month+

Summary

Senior DevSecOps Lead with strong expertise in cloud-native architecture, security, and resilience to set the technical direction for our development teams.

This role bridges development and operations while ensuring secure, scalable, and resilient systems. The ideal candidate will have deep experience in AWS, API management, infrastructure automation, and secure software development practices, combined with the ability to guide teams on security posture, vulnerability management, and compliance alignment.

Key role and responsibilities

Architecture & Technical Leadership

• Define and enforce platform architecture standards with a focus on security, resilience, and scalability.
• Provide technical direction and mentorship to development and DevOps teams.
• Drive adoption of secure coding practices, threat modelling, and resilient design patterns.

Security & Compliance

• Implement and maintain security best practices across CI/CD pipelines and infrastructure.
• Lead vulnerability management, including scanning, remediation, and dependency upgrades.
• Ensure API security using OAuth, JWT, API keys, and other mechanisms.
• Collaborate with InfoSec teams to align with organizational compliance frameworks.

Platform Maintenance & Resilience

• Oversee regular upgrades of libraries, packages, and infrastructure components.
• Establish disaster recovery strategies, high availability configurations, and resilience testing.
• Automate upgrade workflows using Infrastructure-as-Code and CI/CD tools.

Infrastructure & DevOps

• Design and manage secure CI/CD pipelines using Azure DevOps and GitHub Actions.
• Provision and configure infrastructure using Terraform and Ansible.
• Deploy microservices on AWS ECS/ECR/Fargate, ensuring secure container environments.

API Management & Integration

• Define API architecture and life cycle management using Apigee Edge or similar platforms.
• Implement API design patterns, performance optimization, and custom analytics reporting.

Key skills for this role

• Cloud & DevOps: AWS (Lambda, API Gateway, ECS, DynamoDB, S3), Azure DevOps, GitHub workflows.
• Security Expertise: Secure coding, vulnerability scanning, dependency management, compliance alignment.
• Infrastructure Automation: Terraform, Ansible, Docker.
• Programming: Proficiency in Python and Node.js.
• API Management: Apigee or equivalent platforms.
• Architecture: Strong understanding of distributed systems, resilience engineering, and secure design.
• Soft Skills: Excellent communication, stakeholder engagement, and leadership capabilities.