Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Join us to enhance security in cloud environments and automate processes.
- Company: Be part of Nordcloud, a leader in cloud implementation and innovation.
- Benefits: Enjoy flexible hours, training budgets, and comprehensive health care.
- Other info: Collaborative culture with opportunities for growth and learning.
- Why this job: Make a real impact on national digital security and shape engineering standards.
- Qualifications: Experience in DevSecOps, AWS, Azure, and IaC tools like Terraform.
The predicted salary is between 60000 - 80000 ÂŁ per year.
Join Nordcloud and be part of the European cloud revolution. We supercharge our customers to innovate in hyperscaler cloud, enabling seamless migration, advanced security, and data-driven success. We are seeking an experienced DevSecOps Engineer to help uplift and standardise the security posture across a large-scale public-sector digital screening programme. The platform spans AWS and Azure, with 20+ cloud‑based services at varying stages of maturity. The goal is to create a coherent, consistent, and modern cybersecurity baseline across all products by embedding security into CI/CD, Infrastructure-as-Code (IaC), and operational processes. You will work closely with product teams, infrastructure engineers, and delivery squads to embed security early (“shift‑left”), automate controls, and ensure consistent guardrails across the entire service portfolio.
Key Responsibilities
- Security Engineering & Automation
- Implement and embed security controls throughout CI/CD pipelines, ensuring security is built-in rather than bolted-on.
- Enhance and maintain IaC (Terraform / ARM / Bicep / CloudFormation) ensuring consistent, repeatable, and secure infrastructure deployments across AWS and Azure.
- Integrate automated security scanning (SAST/DAST/SCA), secrets management, policy enforcement, base image hardening, and runtime protection as part of the delivery workflow.
- Cloud Security (AWS & Azure)
- Work with multi-cloud services to design, implement, and maintain security patterns that can be applied consistently across the portfolio.
- Configure cloud-native security tooling (e.g., guardrails, identity policies, network controls) and ensure all services meet agreed security standards.
- Collaborate on extracting reusable libraries and toolsets to drive standardisation across teams.
- CI/CD & Platform Engineering
- Deliver security improvements through changes to CI/CD and IaC repositories, version controlled alongside application code.
- Build and refine pipelines that support automated testing, deployment, and governance across cloud environments.
- Ensure teams can continuously monitor, detect, and remediate vulnerabilities through integrated pipeline tooling.
- Disaster Recovery & Operational Readiness
- Contribute to DR strategy uplift by defining consistent runbooks, automated processes, and wargaming tools to validate resilience across services.
- Ensure operational documentation is clear, repeatable, and usable by delivery and support teams.
- Collaboration & Delivery
- Work hand‑in‑glove with product teams, architects, and infrastructure engineers to socialise patterns, build capability, and embed practices early.
- Prioritise work based on an existing cybersecurity risk assessment, ensuring high‑value improvements are delivered first.
- Support knowledge sharing, coaching, and embedding of security best practices across engineering teams.
Required Skills & Experience
- Strong background in DevSecOps principles including shift-left security, automated testing, secure SDLC, and cloud-native security engineering.
- Hands-on experience with AWS and Azure cloud environments.
- Experience designing secure and scalable architectures, CI/CD pipelines, and infrastructure automation.
- Proficiency with IaC tools such as Terraform, ARM, Bicep, CloudFormation.
- Experience integrating security tools into CI/CD (SAST, DAST, dependency scanning, secrets scanning, container scanning).
- Familiarity with container orchestration and security (Kubernetes/AKS/EKS).
- Strong understanding of identity, access, network, and policy enforcement across cloud platforms.
- Ability to document runbooks, DR processes, and operational guidance.
- Excellent stakeholder engagement skills across engineering, operations, and delivery teams.
- MUST BE ELIGIBLE FOR SC CLEARANCE.
Desirable Skills
- Experience contributing to or maintaining shared libraries or open-source tooling.
- Knowledge of audit, compliance, and security frameworks.
- Experience in large public‑sector or regulated environments.
Why this role matters
Your work will directly strengthen the security posture of a major national digital screening platform, ensuring consistency, resilience, and trustworthiness across dozens of critical public‑facing services. You’ll be instrumental in shaping secure engineering standards that will be adopted across multiple teams and cloud environments.
What we offer
- Individual training budget and exam fees for certifications.
- Flexible working hours and hybrid working model.
- Company laptop and needed equipment.
- Local package such as up to 7% matched pension contributions, extensive private health care, Bupa dental plan, and a seasonal ticket loan, enhanced maternity and parental leave, gym expense or well-being monthly and mobile phone allowance.
Please read our Recruitment Privacy Policy before applying. All applicants must have the right to work in the UK.
About Nordcloud
Nordcloud is a European leader in cloud implementation, application development, managed services and training. It’s a recognised cloud-native pioneer with a proven track record helping organisations leverage public cloud in a way that balances quick wins, immediate savings and sustainable value. Nordcloud is triple-certified across Amazon Web Services, Microsoft Azure and Google Cloud Platform – with 10 European hubs, over 1,300 employees and has delivered over 1,000 successful cloud projects for companies ranging from midsize to large corporates. Our clients benefit from multi-cloud expertise that guides best practices, preempts pitfalls, provides essential technical support and steers teams through cultural change. From strategy planning to application management, we take our customers through the whole cloud journey to drive real business outcomes from cloud technology. Learn more at www.nordcloud.com.
Nordcloud values diversity and is dedicated to providing equal opportunities for all candidates and employees.
DevSecOps Engineer employer: Nordcloud, an IBM Company
Contact Detail:
Nordcloud, an IBM Company Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land DevSecOps Engineer
✨Tip Number 1
Network like a pro! Reach out to folks in the industry on LinkedIn or at meetups. A friendly chat can open doors that a CV just can't.
✨Tip Number 2
Show off your skills! Create a portfolio or GitHub repo showcasing your DevSecOps projects. It’s a great way to demonstrate your expertise and passion.
✨Tip Number 3
Prepare for interviews by practising common questions and scenarios related to security in CI/CD and cloud environments. We want you to feel confident and ready to shine!
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets the attention it deserves. Plus, we love seeing candidates who are proactive!
We think you need these skills to ace DevSecOps Engineer
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the DevSecOps role. Highlight your experience with AWS, Azure, and IaC tools like Terraform. We want to see how your skills align with our needs!
Showcase Your Projects: Include specific projects where you've implemented security in CI/CD pipelines or worked on cloud security. This gives us a clear picture of your hands-on experience and problem-solving skills.
Be Clear and Concise: When writing your application, keep it clear and to the point. Use bullet points for key achievements and avoid jargon unless it's relevant. We appreciate straightforward communication!
Apply Through Our Website: Don’t forget to apply through our website! It’s the best way for us to receive your application and ensures you’re considered for the role. We can’t wait to hear from you!
How to prepare for a job interview at Nordcloud, an IBM Company
✨Know Your Tech Inside Out
Make sure you’re well-versed in the tools and technologies mentioned in the job description, like AWS, Azure, Terraform, and CI/CD practices. Brush up on your knowledge of security principles and how they apply to cloud environments, as this will show your potential employer that you’re ready to hit the ground running.
✨Showcase Your Problem-Solving Skills
Prepare to discuss specific challenges you've faced in previous roles, particularly around security automation and cloud architecture. Use the STAR method (Situation, Task, Action, Result) to structure your answers, making it easy for interviewers to see how you approach problems and implement solutions.
✨Emphasise Collaboration
Since the role involves working closely with product teams and engineers, be ready to talk about your experience in collaborative environments. Share examples of how you’ve successfully worked with cross-functional teams to embed security practices and improve processes, highlighting your communication skills.
✨Prepare Questions That Matter
Think of insightful questions to ask your interviewers about their current security challenges or how they measure success in this role. This not only shows your genuine interest in the position but also gives you a chance to assess if the company’s values align with yours.