Senior DevX Build Pipeline Engineer - CI/CD & DevSecOps in Sheffield

Our client in the Information Technology and Services industry is looking for a DevX Build Pipeline Engineer / DevOps Engineer to support the development, optimization, and security of enterprise CI/CD pipeline platforms within a large-scale engineering environment. This role will focus on evolving Jenkins Shared Libraries, strengthening software supply-chain integrity, improving build performance, and delivering secure, scalable, and provenance-rich pipeline solutions across multi-language build ecosystems.

What you will do:

• Design and maintain Groovy-based Jenkins pipeline steps supporting build, test, packaging, scanning, and deployment activities.
• Extend Python tooling to support SLSA provenance, SBOM generation, digest validation, and security scan aggregation processes.
• Optimize CI/CD pipeline performance through parallelization, caching strategies, dependency prefetching, and scope-reduced BOM generation.
• Ensure artifact integrity through accurate SHA1 and SHA256 mapping, reproducible builds, and evidence modeling practices.
• Refactor and standardize legacy scripts by removing global state dependencies and consolidating hashing and templating standards.
• Document ci-config.yaml standards, implementation guidelines, and usage patterns across engineering teams.
• Mentor engineering teams on secure pipeline development, DevSecOps practices, and supply-chain security standards.
• Troubleshoot pipeline incidents, identify root causes, and implement preventative improvements.
• Support feature enhancements, bug classification, hot fixes, and pipeline optimization initiatives.
• Collaborate with engineering and platform teams to strengthen CI/CD scalability, automation, and security posture.
• Support container, SAST, SonarQube, Sonatype IQ, and security scanning integrations across pipeline ecosystems.
• Contribute to Terraform, Helm, GitOps, release automation, and cloud platform integration initiatives where required.

Qualifications:

• Minimum 7 years of engineering experience with at least 3 years focused on CI/CD platform engineering or DevSecOps environments.
• Strong expertise in Jenkins and Groovy Shared Library development.
• Advanced Python automation and scripting experience including JSON and YAML processing.
• Strong knowledge of Maven, NPM, Python packaging ecosystems, and container image metadata management.
• Experience with supply-chain security standards including SLSA, CycloneDX SBOM, digests, and artifact integrity practices.
• Hands-on experience with SonarQube, Sonatype IQ, SAST scanning, container security scanning, and related tooling.
• Proven experience optimizing CI/CD performance through caching, parallelization, and dependency management.
• Understanding of compliance, security, and governance requirements within enterprise engineering environments.
• Experience with Terraform modules, Helm chart publishing, GitOps, or release automation is advantageous.
• Exposure to GCP or AWS cloud platforms is beneficial.
• Strong communication, documentation, troubleshooting, and stakeholder collaboration skills.
• Ability to work independently with strong ownership and delivery focus.

All your information will be kept confidential according to EEO guidelines. Candidates must be legally authorized to live and work in the country where the position is based, without requiring employer sponsorship. HelloKindred is committed to fair, transparent, and inclusive hiring practices. We assess candidates based on skills, experience, and role-related requirements. We appreciate your interest in this opportunity. While we review every application carefully, only candidates selected for an interview will be contacted. HelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, colour, religion, sex, gender identity or expression, sexual orientation, age, national origin, disability, veteran status, or any other protected characteristic under applicable law.