Senior DevSecOps/Platform Engineer

My client is a leading technology company that develop innovative solutions for their clients. They are looking for a Senior DevSecOps/Platform Engineer to join their team working in the area of transformation and modernisation.

This is an opportunity to work in a fast-paced, Agile organisation that prides itself on engineering best practice. Reporting to the Head of Platform Engineering, you are a team player and a strong contributor to team culture. You are proud of the work that you produce and demonstrate a high degree of accountability for the thorough execution of all assigned tasks.

To excel in this role, you are a highly motivated professional seeking to advance your career as a DevSecOps Engineer, with a focus on Platform Engineering principles and practices. You bring 5+ years of demonstrable experience in implementing and continuously improving AppSec practices, inhouse CDK libraries, CI/CD pipelines, and developer productivity tools. You thrive in a hands-on role, working both autonomously and collaboratively within an agile development

environment, great at picking up new technologies and tools in a rapid and dynamic pace.

Your success will be measured by your ability to enable and improve the developer experience through automation, self-service platforms, and adoption of Platform Engineering principles, and at the same time track and improve Application and infrastructure security posture. Your work will empower developers to deliver with greater efficiency, security and confidence.

You actively champion Platform Engineering practices, driving initiatives that simplify workflows, reduce friction, and enhance productivity across development teams. Your contributions create a tangible, positive impact that is recognised and valued by the wider technology team. You collaborate with Development Team peers—Engineers, Testers, and Product Owners—to deliver continuous infrastructure updates and fixes, reducing errors and ensuring seamless development-to-production pipelines.

Your core focus will be:

• Analyse and understand infrastructure and services for my client's enterprise-based SaaS offerings
• Advocate Platform Engineering culture, principles, and ways of working, and reflect them in day-to-day tasks.
• Build and improve templated artifacts, such as CDK constructs, CI/CD pipeline templates that set guardrails, configuration baselines and can be consumed by various squads whether explicitly or implicitly.
• Maintain and improve CI/CD pipelines to support software deployment and maintenance across multiple environments, focusing on migrating from Jenkins to Bitbucket pipelines.
• Embed and automate API security and other testing practices in CI/CD pipelines.
• Uplift AppSec capabilities with a focus on .Net secure code reviews and promote secure coding best practices (e.g., OWASP Top 10).
• Implement and support DevSecOps metrics (e.g., DORA) to track and enhance performance.
• Contribute to observability efforts through code instrumentation and OpenTelemetry.
• Investigate security incidents, compliance violations, and implement remediation measures.
• Build and maintain platform tools and templates to enable developer self-service (e.g., PROJEN project templates, service catalogues).
• Identify and address product engineering pain points to improve developer productivity and experience.
• Act as a DevSecOps SME, advising the Platform Engineering and broader technology teams.
• Promote good documentation, code review, and system security practices.
• Participate in agile ceremonies (e.g., sprint planning, retrospectives) to enhance team workflows.
• Stay updated on industry best practices, trends, and compliance requirements.

Your experience will include:

• 5+ years of proven experience in DevSecOps, Platform Engineering, and / or combined with Software Development experience.
• Expertise in IaC tools (e.g., advanced CDK and AWS CloudFormation configurations).
• Proven experience building CI/CD pipelines (BitBucket, Jenkins).
• Hands-on knowledge of AWS services (e.g., EC2, IAM, Lambda, SQS, Secrets Manager).
• Familiarity with service instrumentation using OpenTelemetry or similar frameworks.
• Proficiency in at least one web development language (.Net preferred).
• Strong understanding of cybersecurity frameworks (OWASP, NIST, ISO) and secure design principles.
• Analytical, logical, and lateral thinking skills with a results-driven mindset.
• Passion for automation, security, and continuous learning of evolving threats and technologies.

Interested? You know the drill... hit the apply button We look forward to hearing from you