DevSecOps Engineer

DevSecOps Policy Engineer

Farnborough (Hybrid)

Work on Technology That Protects What Matters

Join a team delivering secure digital solutions that support Defence and National Security missions. Working in highly secure environments, you'll help solve complex technical challenges where security, innovation and reliability are critical.

We're looking for a DevSecOps Policy Engineer to help build and automate secure-by-design platforms, translating security policy into code and enabling modern cloud-native delivery across mission-critical environments.

The Role

As a DevSecOps Policy Engineer, you'll work closely with software engineers, platform engineers, architects and security specialists to automate security controls, improve deployment pipelines and support secure application delivery across Azure, VMware Cloud Foundation (VCF) and Hyper-V environments.

You'll play a key role in embedding security into every stage of the software lifecycle while supporting Zero Trust and Data-Centric Security initiatives.

Key Responsibilities

• Translate security policies, regulatory requirements and internal standards into automated policy-as-code solutions.
• Develop and maintain secure software solutions alongside development and experimentation teams.
• Build and enhance responsive web interfaces using JavaScript/TypeScript and React where required.
• Develop automation supporting Azure, Hyper-V and VMware Cloud Foundation (VCF) platforms.
• Create and maintain CI/CD pipelines to automate software delivery.
• Support Kubernetes and containerised workloads using Docker and related tooling.
• Develop custom software supporting Data-Centric Interoperability and Zero Trust architectures.
• Provide automation and orchestration across application, platform and workload environments.
• Participate in peer code reviews and promote engineering best practice.
• Work within Agile teams to continuously improve delivery, security and operational resilience.
• Keep up to date with emerging DevSecOps technologies and security practices.

Skills & Experience

We're interested in candidates with experience across some or all of the following:

Essential

• Strong experience working with Azure, Hyper-V and/or VMware Cloud Foundation (VCF).
• Experience implementing DevSecOps and Infrastructure-as-Code principles.
• Knowledge of CI/CD pipelines and deployment automation.
• Experience with Kubernetes and container technologies.
• Strong Git version control experience.
• Understanding of secure software engineering principles.
• Excellent troubleshooting and problem-solving skills.
• Strong communication and stakeholder engagement skills.

Desirable

• Experience translating security controls into Policy as Code.
• JavaScript, TypeScript and React development experience.
• Experience with Docker and container orchestration.
• Knowledge of Zero Trust and Data-Centric Security architectures.
• Experience across both public and private cloud environments.
• Familiarity with Agile delivery methodologies.
• Understanding of web application security and secure coding practices.
• Experience contributing to technology selection and architecture discussions.

What's On Offer

• Competitive salary
• Hybrid working
• Annual bonus
• 25 days annual leave plus bank holidays
• Private medical insurance
• Life assurance
• Excellent pension contribution
• Ongoing professional development and funded training
• Modern offices with on-site gym, café, restaurant and free parking

Security Clearance

Due to the nature of the work, applicants must be eligible to obtain UK Security Clearance (SC). Candidates already holding active SC clearance are particularly encouraged to apply.

This is an excellent opportunity for a DevSecOps engineer who enjoys automating security, working with cloud-native technologies and delivering solutions that directly support UK Defence and National Security programmes.