At a Glance
- Tasks: Join us to enhance security in cloud environments and automate processes.
- Company: Nordcloud, a leader in European cloud implementation and innovation.
- Benefits: Flexible hours, training budget, health care, and a supportive work culture.
- Other info: Collaborative environment with opportunities for growth and learning.
- Why this job: Make a real impact on national digital security and shape engineering standards.
- Qualifications: Experience in DevSecOps, AWS, Azure, and IaC tools like Terraform.
The predicted salary is between 36000 - 60000 £ per year.
Join Nordcloud and be part of the European cloud revolution. We supercharge our customers to innovate in hyperscaler cloud, enabling seamless migration, advanced security, and data-driven success. Currently, we are looking for a DevSecOps Engineer to join our team in the UK.
We are seeking an experienced DevSecOps Engineer to help uplift and standardise the security posture across a large-scale public-sector digital screening programme. The platform spans AWS and Azure, with 20+ cloud‑based services at varying stages of maturity. The goal is to create a coherent, consistent, and modern cybersecurity baseline across all products by embedding security into CI/CD, Infrastructure-as-Code (IaC), and operational processes.
You will work closely with product teams, infrastructure engineers, and delivery squads to embed security early ("shift‑left"), automate controls, and ensure consistent guardrails across the entire service portfolio.
Key Responsibilities- Security Engineering & Automation
- Implement and embed security controls throughout CI/CD pipelines, ensuring security is built-in rather than bolted-on.
- Enhance and maintain IaC (Terraform / ARM / Bicep / CloudFormation) ensuring consistent, repeatable, and secure infrastructure deployments across AWS and Azure.
- Integrate automated security scanning (SAST/DAST/SCA), secrets management, policy enforcement, base image hardening, and runtime protection as part of the delivery workflow.
- Cloud Security (AWS & Azure)
- Work with multi-cloud services to design, implement, and maintain security patterns that can be applied consistently across the portfolio.
- Configure cloud-native security tooling (e.g., guardrails, identity policies, network controls) and ensure all services meet agreed security standards.
- Collaborate on extracting reusable libraries and toolsets to drive standardisation across teams.
- CI/CD & Platform Engineering
- Deliver security improvements through changes to CI/CD and IaC repositories, version controlled alongside application code.
- Build and refine pipelines that support automated testing, deployment, and governance across cloud environments.
- Ensure teams can continuously monitor, detect, and remediate vulnerabilities through integrated pipeline tooling.
- Disaster Recovery & Operational Readiness
- Contribute to DR strategy uplift by defining consistent runbooks, automated processes, and wargaming tools to validate resilience across services.
- Ensure operational documentation is clear, repeatable, and usable by delivery and support teams.
- Collaboration & Delivery
- Work hand‑in‑glove with product teams, architects, and infrastructure engineers to socialise patterns, build capability, and embed practices early.
- Prioritise work based on an existing cybersecurity risk assessment, ensuring high‑value improvements are delivered first.
- Support knowledge sharing, coaching, and embedding of security best practices across engineering teams.
- Strong background in DevSecOps principles including shift-left security, automated testing, secure SDLC, and cloud-native security engineering.
- Hands-on experience with AWS and Azure cloud environments.
- Experience designing secure and scalable architectures, CI/CD pipelines, and infrastructure automation.
- Proficiency with IaC tools such as Terraform, ARM, Bicep, CloudFormation.
- Experience integrating security tools into CI/CD (SAST, DAST, dependency scanning, secrets scanning, container scanning).
- Familiarity with container orchestration and security (Kubernetes/AKS/EKS).
- Strong understanding of identity, access, network, and policy enforcement across cloud platforms.
- Ability to document runbooks, DR processes, and operational guidance.
- Excellent stakeholder engagement skills across engineering, operations, and delivery teams.
- MUST BE ELIGIBLE FOR SC CLEARANCE.
- Experience contributing to or maintaining shared libraries or open-source tooling.
- Knowledge of audit, compliance, and security frameworks.
- Experience in large public‑sector or regulated environments.
Your work will directly strengthen the security posture of a major national digital screening platform, ensuring consistency, resilience, and trustworthiness across dozens of critical public‑facing services. You will be instrumental in shaping secure engineering standards that will be adopted across multiple teams and cloud environments.
What we offer:- Individual training budget and exam fees for certifications.
- Flexible working hours and hybrid working model.
- Company laptop and needed equipment.
- Local package such as up to 7% matched pension contributions, extensive private health care, Bupa dental plan, and a seasonal ticket loan, enhanced maternity and parental leave, gym expense or well-being monthly and mobile phone allowance.
Please read our Recruitment Privacy Policy before applying. All applicants must have the right to work in the UK.
About Nordcloud: Nordcloud is a European leader in cloud implementation, application development, managed services and training. It’s a recognised cloud-native pioneer with a proven track record helping organisations leverage public cloud in a way that balances quick wins, immediate savings and sustainable value. Nordcloud is triple-certified across Amazon Web Services, Microsoft Azure and Google Cloud Platform – with 10 European hubs, over 1,300 employees and has delivered over 1,000 successful cloud projects for companies ranging from midsize to large corporates. Our clients benefit from multi-cloud expertise that guides best practices, preempts pitfalls, provides essential technical support and steers teams through cultural change. From strategy planning to application management, we take our customers through the whole cloud journey to drive real business outcomes from cloud technology.
Learn more at Nordcloud values diversity and is dedicated to providing equal opportunities for all candidates and employees.
DevSecOps Engineer in London employer: Nordcloud, an IBM Company
At Nordcloud, we pride ourselves on being an exceptional employer, offering a dynamic work culture that fosters innovation and collaboration. As a DevSecOps Engineer in the UK, you'll benefit from flexible working hours, a generous training budget for certifications, and comprehensive health care packages, all while contributing to impactful public-sector projects that enhance national security. Join us to grow your skills in a supportive environment that values diversity and encourages professional development.
StudySmarter Expert Advice🤫
We think this is how you could land DevSecOps Engineer in London
✨Tip Number 1
Network like a pro! Reach out to folks in the industry on LinkedIn or at meetups. A friendly chat can open doors that a CV just can't.
✨Tip Number 2
Show off your skills! Create a portfolio or GitHub repo showcasing your projects and contributions. It’s a great way to demonstrate your expertise beyond the application.
✨Tip Number 3
Prepare for interviews by practising common questions and scenarios related to DevSecOps. Mock interviews with friends can help you feel more confident and ready to impress.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, we love seeing candidates who are proactive!
We think you need these skills to ace DevSecOps Engineer in London
Some tips for your application 🫡
Tailor Your CV:Make sure your CV is tailored to the DevSecOps Engineer role. Highlight your experience with AWS, Azure, and IaC tools like Terraform. We want to see how your skills align with our needs!
Showcase Your Projects:Include specific projects where you've implemented security controls in CI/CD pipelines or worked with cloud-native security. This gives us a clear picture of your hands-on experience and problem-solving skills.
Be Clear and Concise:When writing your application, keep it clear and to the point. Use bullet points for key achievements and avoid jargon unless it's relevant. We appreciate straightforward communication!
Apply Through Our Website:Don’t forget to apply through our website! It’s the best way for us to receive your application and ensures you’re considered for the role. We can’t wait to hear from you!
How to prepare for a job interview at Nordcloud, an IBM Company
✨Know Your Tech Inside Out
Make sure you’re well-versed in the specific tools and technologies mentioned in the job description, like Terraform, AWS, and Azure. Brush up on your knowledge of CI/CD pipelines and security practices, as you’ll likely be asked to discuss how you’ve implemented these in past roles.
✨Showcase Your Collaboration Skills
Since this role involves working closely with product teams and engineers, be prepared to share examples of how you've successfully collaborated in the past. Highlight any experiences where you’ve embedded security practices early in the development process or worked on cross-functional teams.
✨Prepare for Scenario-Based Questions
Expect questions that ask you to solve hypothetical problems related to security in cloud environments. Think about how you would approach integrating automated security scanning or designing secure architectures, and be ready to explain your thought process clearly.
✨Demonstrate Your Passion for Security
Show that you’re not just technically skilled but also genuinely interested in cybersecurity. Discuss any relevant certifications, training, or personal projects that demonstrate your commitment to staying updated on security trends and best practices.
