Principal DevSecOps Engineer in London

In Digital Customer Experience we specialise in navigating our clients through the complexities of large-scale, technology-driven transformation programmes, using our skills to drive outstanding delivery. Having the right people using the right methodology and following the right process gives every client the right result. The DevOps and Platform Engineering capability within Digital Customer Experience is a growing team of people dedicated to ensuring that the technologies selected and the way that they are implemented meet the business objectives of our clients.

Your role:

• Drive and coordinate DevSecOps practices across multiple digital products delivered as part of a wider business and digital transformation programme.
• Embed security, compliance and automation into the software delivery lifecycle, ensuring platforms and applications meet stringent security and operational standards.
• Establish consistent, documented processes used by DevSecOps engineers across each environment, including a coordinated approach for releasing updates across the integrated set of products and platforms in scope.
• Design, implement, document and continuously improve DevSecOps practices across the delivery teams, including:
• Vulnerability lifecycle management, including allowlist processes and risk acceptance where required.
• Policy enforcement for workloads, container images and infrastructure.
• Observability, monitoring, logging and audit controls. Tracking and remediation of technical debt and improving the quality of developed code.
• Control and governance of change across the path to live.
• Partner with developers to embed secure-by-design engineering and ensure compliance with client’s security standards and technical standards.
• Enable and govern Infrastructure as Code (IaC) practices across teams and environments.
• Contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured, actions tracked, and documenting security processes, controls and operational runbooks.

Your skills and experience:

• Proven experience as a DevSecOps Lead, establishing and operating DevSecOps ways of working and associated tooling.
• Strong expertise in Azure, AWS, and networking fundamentals. Additional experience in Oracle Cloud Infrastructure also desirable.
• CI/CD and GitOps in a secure environment (e.g. GitHub Actions, Argo CD, Argo Rollouts).
• Security scanning, compliance tooling, and secrets and identity management (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager).
• Containers and orchestration (e.g. Docker, Azure Kubernetes Service, AWS EKS).
• Infrastructure as Code (e.g. Terraform).
• Observability (e.g. Grafana, Loki).
• Scripting and automation (e.g. Python, Bash).
• Experience delivering within the UK Government Digital Service (GDS) lifecycle on a public sector engagement, or a demonstrated ability leading distributed, cross-functional teams, particularly with developers, testers and DevSecOps engineers.

We are a Disability Confident Employer. Capgemini is proud to be a Disability Confident Employer (Level 2) under the UK Government’s Disability Confident scheme. As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who declare they have a disability and meet the minimum essential criteria for the role.

Your security clearance:

To be successfully appointed to this role, it is a requirement to obtain Security Check (SC) clearance. To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements.

Make it real – what does it mean for you?

We realise a Total Reward package should be more than just compensation. At Capgemini we offer a range of core and flexible benefits and have a Peer Recognition Portal called Applaud. You will be empowered to explore, innovate, and progress. You will benefit from Capgemini’s ‘learning for life’ mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard ManageMentor, Cybersecurity qualifications and much more.

Why you should consider Capgemini:

Growing clients’ businesses while building a more sustainable, more inclusive future is a tough ask. When you join Capgemini, you’ll join a thriving company and become part of a collective of free-thinkers, entrepreneurs and industry experts. We find new ways technology can help us reimagine what’s possible.

About Capgemini:

Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organisations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries.