DevSecOps Platform Engineer

A Leading Financial Services Group is seeking a highly skilled DevSecOps Platform Engineer to design, implement, and enhance secure software engineering pipelines. In this key technical infrastructure position, you will integrate automated security controls directly into enterprise-scale CI/CD platforms across global networks. Furthermore, you will deploy secure-by-design patterns, policy-as-code baselines, and vulnerability shielding across complex runtime architectures. Consequently, this role is vital for driving supply chain integrity and elevating cloud resilience within a regulated environment.

The DevSecOps Platform Engineer must combine an automation-first development mindset with robust threat-modeling capabilities. Working within a hybrid model under UK operational hours, you will collaborate across federated delivery lines to translate technical risks into actionable business resolutions. Therefore, the company is looking for an expert engineer who executes software provenance standards and code-signing frameworks seamlessly. If you want to lead enterprise-wide DevSecOps maturity roadmaps, this position offers an exceptional platform.

Key Responsibilities

• Design, deploy, and support enterprise-grade secure DevSecOps infrastructure platforms and delivery pipelines.
• Construct and scale highly automated CI/CD pipelines embedded with shift-left security orchestration gates.
• Integrate SAST, DAST, and dependency security scanning tools throughout the active application development life cycle.
• Enforce automated security controls and immutable infrastructure patterns across distributed code repositories.
• Develop and maintain centralized infrastructure security baselines utilizing structured Policy-as-Code rules.
• Perform systematic platform security assessments, architectural gap analysis, and comprehensive threat modeling.
• Implement end-to-end vulnerability management workflows across internal developer tooling environments.
• Orchestrate Software Bill of Materials (SBOM) tracking, automated code-signing workflows, and supply chain tracking.
• Formulate long-term DevSecOps capability maturity models, control frameworks, and technical engineering roadmaps.
• Translate complex technical risks into clear, actionable impact summaries for non-technical corporate business headers.

Requirements and Qualifications

• Bachelor’s or Master’s degree in Computer Science, Cyber Security, Software Engineering, or an allied technical domain.
• 5+ Years of experience in DevSecOps engineering, secure CI/CD orchestration, and large-scale platform automation.
• Prior background working within highly regulated institutional environments, preferably Banking or Financial Services.
• Familiarity with application security layers, cryptography rules, network protocols, and vulnerability lifecycle managers.
• Beneficial credentials: CISSP, CISM, CCSK, CCSP, or equivalent cybersecurity certifications; comfort with UK shift lines.