At a Glance
- Tasks: Join our team to design and manage secure DevSecOps pipelines and IAM systems.
- Company: Be part of a cutting-edge research infrastructure team focused on hybrid environments.
- Benefits: Enjoy flexible work options, competitive pay, and opportunities for professional growth.
- Why this job: Make an impact by embedding security in innovative research tools and workflows.
- Qualifications: 5+ years in DevSecOps or cloud security; strong programming skills required.
- Other info: Experience with AWS and policy-as-code frameworks is a plus.
The predicted salary is between 48000 - 72000 £ per year.
About the Role
We are seeking an experienced DevSecOps Engineer with deep domain knowledge in security-as-code practices to join a high-performance infrastructure engineering team. This team supports one of the world’s most advanced hybrid research environments, combining high-performance computing (HPC), large-scale data storage, and public cloud infrastructure.
This hands-on technical role will focus on enabling secure, seamless workload portability between on-premise and cloud-based research platforms. You’ll architect and engineer solutions that enforce security from the ground up—partnering closely with infrastructure, research, and software teams.
Core Focus Areas
- Identity and Access Management (IAM)
- Secrets Management (e.g., HashiCorp Vault)
- Policy-as-Code (e.g., OPA, Kyverno, Gatekeeper)
Key Responsibilities
- Design, implement, and manage IAM systems, including provisioning, authentication, authorization, and role management across hybrid environments
- Develop and maintain DevSecOps pipelines that integrate compliance, secrets management, and access control as code
- Collaborate with researchers and infrastructure engineers to embed security-by-design into tools, workflows, and infrastructure platforms
- Build integrations with secrets management platforms, such as HashiCorp Vault
- Automate infrastructure deployments and compliance with Terraform, Ansible, and other IAC tools
- Monitor platform health and risk using Prometheus, Grafana, Splunk, and similar observability tools
- Write scalable, maintainable tooling in Python or Go to support platform automation and security
Preferred Qualifications
- 5+ years in DevSecOps, platform engineering, or cloud security roles
- Proven experience in designing and operating hybrid infrastructure environments (on-prem + AWS preferred)
- Deep understanding of security protocols like SAML, OAuth2, OIDC, LDAP
- Experience with policy-as-code frameworks such as OPA, Kyverno, Gatekeeper, or Sentinel
- Proficiency in secrets management, especially HashiCorp Vault
- Strong programming and scripting skills in Python or Golang
- Familiarity with Docker and Kubernetes is a plus
- Strong understanding of CI/CD pipelines using tools such as GitLab, Jenkins, GitHub Actions
Contact Detail:
Levy Global Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land DevSecOps Engineer
✨Tip Number 1
Familiarise yourself with the specific tools and technologies mentioned in the job description, such as HashiCorp Vault, Terraform, and CI/CD pipelines. Having hands-on experience or projects showcasing these skills can set you apart during discussions.
✨Tip Number 2
Network with professionals in the DevSecOps field, especially those who work with hybrid infrastructures. Engaging in relevant online communities or attending industry meetups can provide insights and potentially lead to referrals.
✨Tip Number 3
Prepare to discuss real-world scenarios where you've implemented security-as-code practices. Be ready to explain your thought process and the impact of your solutions on previous projects, as this will demonstrate your practical knowledge.
✨Tip Number 4
Showcase your programming skills by contributing to open-source projects or creating your own tools related to DevSecOps. This not only enhances your portfolio but also demonstrates your commitment to continuous learning and improvement.
We think you need these skills to ace DevSecOps Engineer
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights relevant experience in DevSecOps, platform engineering, and cloud security. Emphasise your familiarity with security-as-code practices and any specific tools mentioned in the job description, such as HashiCorp Vault or Terraform.
Craft a Compelling Cover Letter: In your cover letter, explain why you are passionate about the role and how your skills align with the company's needs. Mention specific projects or experiences that demonstrate your expertise in IAM systems, secrets management, and policy-as-code frameworks.
Showcase Technical Skills: Include a section in your application that lists your technical skills, particularly those related to programming languages like Python or Go, and tools like Prometheus or Grafana. This will help the hiring team quickly see your qualifications.
Highlight Collaboration Experience: Since the role involves working closely with researchers and infrastructure engineers, provide examples of past collaborations. Describe how you have successfully embedded security-by-design into workflows and tools in previous roles.
How to prepare for a job interview at Levy Global
✨Showcase Your Technical Skills
Be prepared to discuss your experience with security-as-code practices and hybrid infrastructure environments. Highlight specific projects where you've implemented IAM systems or developed DevSecOps pipelines, as this will demonstrate your hands-on expertise.
✨Understand the Company’s Tech Stack
Research the tools and technologies used by the company, such as HashiCorp Vault, Terraform, and CI/CD pipelines. Familiarity with their specific stack will show your genuine interest in the role and help you answer technical questions more effectively.
✨Prepare for Scenario-Based Questions
Expect to face scenario-based questions that assess your problem-solving skills in real-world situations. Think about how you would approach integrating security into workflows or managing secrets across hybrid environments, and be ready to articulate your thought process.
✨Emphasise Collaboration Skills
Since the role involves working closely with researchers and infrastructure engineers, highlight your ability to collaborate effectively. Share examples of past teamwork experiences where you successfully embedded security practices into projects, showcasing your communication and interpersonal skills.