Senior AWS DevOps Engineer in Manchester

We are looking for a Senior AWS DevOps Engineer for a 12 month (Inside IR35) hybrid contract based up to 3 days per week in Birmingham, Manchester, Leeds or Newcastle. An active SC Clearance is an essential requirement for this role, as a minimum you must be willing & eligible to undergo checks.

Team Galaxy owns and runs the shared platform services that engineering teams across DWP Digital depend on to build and ship software, including GitLab, GitHub Enterprise, Nexus, vulnerability management, and the build and deploy infrastructure.

Objectives:

• Keep Team Galaxy's core platforms reliable, secure, and well-maintained so that engineering teams across DWP Digital can deliver software without interruption.
• Automate and improve platform operations to reduce toil, lower the risk of incidents, and raise the standard of delivery across consuming teams.
• Support engineering teams in getting the most out of the tools we provide, acting as a knowledgeable and approachable point of contact through our support channel.
• Contribute to keeping the software supply chain secure through vulnerability scanning, dependency management, patching, and artifact management practices.
• Share knowledge openly through documentation, runbooks, and day-to-day collaboration.

Responsibilities:

• Code Storage: Administer GitHub Enterprise and GitLab at an enterprise scale, managing repositories, groups, access controls, and integrations across a large, multi-team organisation.
• Lead and deliver repository migration work, including moving repositories from GitHub Enterprise to GitLab, managing the migration pipeline, and supporting teams through the transition.
• Design, build, and maintain GitLab CI/CD pipelines, including reusable pipeline templates and blueprints consumed by teams across DWP Digital.
• Artifact Storage: Administer Nexus Repository Manager at an enterprise scale: configure and maintain hosted, Proxy, and group repositories across multiple package formats (Maven, npm, Docker, and others).
• Investigate and resolve Nexus incidents and support teams with connectivity and authentication issues.
• Vulnerability Management: Operate and develop Wiz integration for container and infrastructure vulnerability scanning across the Galaxy estate.
• Manage Renovate configuration for automated dependency updates, including automerge policies and security enforcement across consuming repositories.
• Own OS and software patching for the EC2 fleet in AWS, planning and executing patching cycles, tracking compliance, and responding to critical patch requirements.
• Build and Deploy: Build, maintain, and improve CI/CD pipelines using GitLab Pipelines and Jenkins, including shared pipeline components and reusable Terraform Blueprints.
• Manage containerised workload deployments using Docker and AWS ECS.
• Write and maintain Terraform to manage infrastructure, IAM policies, and pipeline integrations.
• Manage GitLab Runner infrastructure: registration, concurrency configuration, and patching.
• General: Work in an agile Kanban team, attending daily stand-up and contributing to delivery planning.

Essential Skills:

• Strong hands-on experience designing and building GitLab CI/CD pipelines, including reusable pipeline templates.
• Experience administering GitHub Enterprise and/or GitLab at enterprise scale.
• Hands-on experience administering Nexus at an enterprise level: configuring and managing repositories across multiple package formats, life cycle policies, certificate management, and integration with CI/CD tooling.
• Experience working across build and deploy tooling. Candidates should be comfortable with at least three of: Jenkins pipeline administration, Docker container management, Terraform for infrastructure and IAM, and deploying containerised workloads to AWS ECS.
• Experience working in a large enterprise or public-sector engineering environment with many teams depending on shared infrastructure.
• Background in a platform, enablement, or infrastructure team where your customers are other engineers rather than end-users.
• Experience managing OS and software patching in AWS, including EC2 fleet patching cycles and patch compliance.

Please be aware that this role can only be worked within the UK and not Overseas.

Disability Confident: As a member of the Disability Confident Scheme, DWP guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy.

Armed Forces Covenant: DWP guarantees to interview veterans or spouses/partners of military personnel who meet all the essential criteria for the vacancy.

In applying for this role, you acknowledge that this role falls in scope of the Off Payroll Working in the Public Sector legislation.