DevSecOps Engineer

At Grant Thornton we do things differently - looking to the future, driving ambitious growth and pioneering positive change in our industry. Providing audit, tax and advisory services, we empower clients through strategic insight, curiosity, and genuine partnership. And we empower our people with real opportunity, an inclusive culture and work life balance.

Grant Thornton is building a new digital team as part of the firm’s £500m multi-year investment to transform how we work and deliver for clients. This investment is focused on redesigning our operating model around the way clients make decisions, using data, digital tools, and streamlined processes to remove friction, reduce duplication and provide faster, clearer insights. The new digital team will play a critical role in shaping and embedding these changes across the firm, developing tools, platforms, and digital capabilities that accelerate decision-making, improve the client experience, and empower our people to work smarter.

As a DevSecOps Engineer within our practice, you will:

• Architect, implement, and operate CI/CD pipelines across all environments.
• Develop infrastructure-as-code (eg Bicep/Terraform) for consistent, repeatable, secure cloud provisioning.
• Introduce and manage security tooling including vulnerability scanning, dependency scanning, and SIEM integrations.
• Ensure strong identity, access, and secrets management aligned with zero-trust principles.
• Implement observability tooling and dashboards (logs, metrics, alerts) for proactive issue detection.
• Conduct disaster recovery and business continuity planning and exercises.
• Collaborate with infrastructure, security, product, software engineering, and architecture teams to guide secure design and delivery.
• Act as subject matter expert for DevSecOps practices, tooling, and governance.

Joining us as a DevSecOps Engineer, the minimum criteria you’ll need is proven experience designing and managing secure CI/CD pipeline and cloud-native infrastructure. A strong understanding of Azure cloud, including networking, identity, compute, and security controls and hands-on experience with infrastructure-as-code (eg Bicep/Terraform) and automation tooling.

It would be great if you had some of the following skills, but don’t worry if you don’t tick every box, we’ll help you develop along the way:

• Ability to embed security practices such as threat modelling, SAST, DAST, and policy-as-code.
• Strong communication and collaboration skills, able to influence engineers and stakeholders.
• Experience delivering in complex or multi-stakeholder environments.
• Certifications in cloud (Azure), security (e.g., Security+, CISSP), or DevOps.
• Experience leading or establishing DevSecOps or platform engineering capabilities.
• Experience introducing testing and security automation into existing pipelines.
• Experience with Crowdstrike or similar.

Embracing uniqueness, the culture at Grant Thornton thrives on the contributions of all our people. Building an inclusive culture, where we value difference and respect our colleagues helps our people to perform at the best of their ability and realise their potential.

Life is more than work. The things you do, and the people you’re with outside of work matter, that’s why we’re happy to look at flexible working options for all our roles, and we’ll always do our best to keep your work and life in balance.

The impact you can make here will go far beyond your day job. From secondments, to fundraising for local charities, or investing in entrepreneurs in the developing world, you’ll be giving back to society.

We’re looking for people who want to contribute, spark fresh ideas and go beyond expectations. People who want to be able to proudly do what’s right, for the firm, our clients, our people and themselves.