At a Glance
- Tasks: Design and build secure cloud platforms while embedding security into the software delivery lifecycle.
- Company: Join Holland & Barrett, a leader in health and wellness with a focus on innovation.
- Benefits: Enjoy competitive salary, health cash plan, flexible working, and discounts.
- Other info: Be part of a dynamic team with opportunities for personal and professional growth.
- Why this job: Shape the future of security in software delivery and influence engineering culture.
- Qualifications: Experience in DevSecOps, AWS, and strong communication skills required.
The predicted salary is between 60000 - 80000 £ per year.
We're building a secure, cloud-native platform that underpins how software is delivered across the organisation. Following a major digital transformation, our platform enables teams to ship high-quality software quickly, safely, and consistently—by default. As we continue to scale, security, reliability, and developer experience are treated as first-class concerns, designed in from the start. This role sits at the heart of that mission, shaping how security is applied at scale and how engineering teams confidently move from idea to production.
About the role
As a DevSecOps Engineer, you'll be a hands‑on contributor to the design, build, and operation of our internal platform. This is a delivery-focused role, working closely with SRE, Cloud, and Application Security teams to embed security controls, guardrails, and best practices directly into tooling, pipelines, and infrastructure. You'll help define how security is applied at scale in a pragmatic, developer-friendly way, influencing engineering culture through code, automation, and clear technical standards—raising the baseline for security and operational excellence across the organisation.
The Tech Stack
- Cloud & Networking: AWS (multi-account, IAM, VPC, managed services), hybrid/on‑prem connectivity
- Containers & Orchestration: Docker, Kubernetes (EKS, ECS)
- Infrastructure as Code: OpenTofu, Terragrunt, CloudFormation
- CI/CD: GitLab CI, reusable components, self-hosted runners
- Security & Identity: Microsoft Entra, AWS IAM, OIDC, secrets management, policy-as-code
- Observability: Centralised logging, metrics, tracing (e.g. Datadog, OpenTelemetry)
- Platform Automation: Declarative configuration and infrastructure management
- Internal Tooling: Developer-facing tools and services built with Python, Go, and modern frontend frameworks
- Version Control: Git, merge requests, and code review workflows
We value strong fundamentals over specific tools—if you understand the principles, you'll thrive here.
What You'll Do
- Design, build, and operate secure cloud and platform capabilities
- Embed security controls across the software delivery lifecycle by default
- Build and maintain fast, reliable, secure CI/CD pipelines and reusable components
- Automate security, compliance, and operational checks
- Partner with engineering teams to remove friction and improve workflows
- Contribute to platform architecture, standards, and technical direction
- Promote ownership, continuous improvement, and pragmatic DevSecOps practice
Key Requirements
- Hands‑on experience as a DevSecOps Engineer, Platform Engineer, Cloud Security Engineer, or similar role
- Strong understanding of DevSecOps principles, including CI/CD, infrastructure as code, and security automation
- Solid experience working in AWS environments
- Practical knowledge of containerised workloads and Kubernetes
- Clear communication skills and the ability to work effectively across teams
- A focus on raising engineering standards through practical, scalable solutions
Why Holland & Barrett?
You will be joining at a point where the platform is still being actively shaped, with real scope to influence how security and delivery work across the organisation. This role offers autonomy, technical ownership, and the opportunity to build foundational capabilities that directly impact hundreds of engineers. We offer a competitive salary, comprehensive benefits, and flexible working arrangements. If you enjoy building secure platforms that developers actually love, we'd love to hear from you.
What we offer
- Wellbeing & Lifestyle Benefits
- Health Cash Plan
- Life Assurance
- Incentive Scheme - Based on company & personal performance
- Virtual GP
- Private Medical care
- FREE at-home blood test kit
- Holiday Purchase option
- Pension Contribution scheme
- Access to ‘Wellhub' with gyms, studios and wellbeing apps
- Discounts & Savings
- 25% Colleague Discount with FREE Standard Delivery
- Exclusive Discounts from a wide range of partners
- £/€50 Annual Product Allowance to spend in store
- Learning & Development
- Access to a variety of learning opportunities, including Level 2-5 Apprenticeships, Workshops and our Digital Learning Library
Holland and Barrett is an equal opportunity employer. We welcome diverse perspectives and are committed to creating an inclusive environment for all colleagues. We understand that when our colleagues are listened to, respected and valued for who they are, we build an organisation with belonging at its heart – making health and wellness a way of life for everyone.
Senior DevSecOps Engineer in London employer: 慨正橡扯
Holland & Barrett is an exceptional employer, offering a unique opportunity for a Senior DevSecOps Engineer to shape the future of our secure, cloud-native platform. With a strong focus on employee wellbeing, flexible working arrangements, and a commitment to continuous learning and development, we foster a collaborative work culture that values diverse perspectives and encourages technical ownership. Join us to make a meaningful impact while enjoying competitive benefits and a supportive environment that prioritises both personal and professional growth.
StudySmarter Expert Advice🤫
We think this is how you could land Senior DevSecOps Engineer in London
✨Tip Number 1
Network like a pro! Reach out to folks in the industry on LinkedIn or at meetups. A friendly chat can open doors that a CV just can't.
✨Tip Number 2
Show off your skills! Create a portfolio or GitHub repo showcasing your projects, especially those related to DevSecOps. It’s a great way to demonstrate your hands-on experience.
✨Tip Number 3
Prepare for interviews by brushing up on common DevSecOps scenarios. Think about how you’d embed security into CI/CD pipelines or automate compliance checks—be ready to share your thought process!
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, we love seeing candidates who are proactive!
We think you need these skills to ace Senior DevSecOps Engineer in London
Some tips for your application 🫡
Tailor Your Application:Make sure to customise your CV and cover letter to highlight your experience with DevSecOps principles and the specific tech stack mentioned in the job description. We want to see how your skills align with our mission of building a secure, cloud-native platform.
Showcase Your Hands-On Experience:In your application, emphasise any hands-on experience you've had as a DevSecOps Engineer or similar roles. We love seeing practical examples of how you've embedded security controls and improved workflows in past projects.
Communicate Clearly:Since this role involves working closely with various teams, clear communication is key. Use your application to demonstrate your ability to convey complex ideas simply and effectively. We appreciate candidates who can bridge the gap between technical and non-technical stakeholders.
Apply Through Our Website:We encourage you to apply directly through our website for the best chance of getting noticed. It’s the easiest way for us to keep track of your application and ensure it reaches the right people. Plus, we love seeing candidates who take that extra step!
How to prepare for a job interview at 慨正橡扯
✨Know Your Tech Stack
Familiarise yourself with the specific technologies mentioned in the job description, like AWS, Docker, and Kubernetes. Be ready to discuss how you've used these tools in past projects and how they relate to security practices.
✨Demonstrate DevSecOps Principles
Prepare to explain your understanding of DevSecOps principles, especially around CI/CD and infrastructure as code. Share examples of how you've embedded security into the software delivery lifecycle in previous roles.
✨Showcase Collaboration Skills
This role involves working closely with various teams. Be prepared to discuss how you've successfully collaborated with engineering, SRE, or security teams in the past. Highlight any experiences where you improved workflows or removed friction.
✨Ask Insightful Questions
At the end of the interview, ask questions that show your interest in the company's culture and the role's impact. Inquire about their current challenges in security and how they envision the DevSecOps practice evolving within the organisation.
