DevSecOps Engineer Manager

Role Overview

The DevSecOps Engineer with 10+ years of experience and technical role responsible for designing, building, and maintaining DevSecOps pipelines that enable continuous integration and continuous delivery (CI/CD) across the programme's application development and deployment lifecycle. Reporting to the Infrastructure Lead, this role plays a critical enabling function across the build, test, and deployment phases of the core banking and payments transformation, ensuring that development teams have robust, secure, and efficient pipelines to support rapid and reliable software delivery. The DevSecOps Engineer is expected to be a strong hands-on technical contributor with deep familiarity across the end-to-end DevSecOps toolchain and a continuous improvement mindset.

Key Responsibilities

Design, build, and maintain CI/CD pipelines to support application development, testing, and deployment activities across the programme's SDLC lifecycle

Integrate security controls and automated security checks into pipelines at every stage, embedding a shift-left security approach across the development lifecycle

Configure and manage DevSecOps tooling across key functions including source code control, code scanning, static and dynamic analysis, code merging, dependency management, code packaging, and artefact management

Implement and maintain automated testing integrations within pipelines, coordinating with the Test Automation Lead to ensure functional, regression, and security test suites are triggered and reported correctly

Manage version control processes and branching strategies, ensuring consistency and traceability across development streams and release branches

Continuously monitor, maintain, and iterate on existing pipelines to improve deployment efficiency, reduce build times, and address bottlenecks as the programme scales through successive test cycles and releases

Support the build and test phases of application rollout, providing hands-on pipeline support to development and testing teams throughout the SDLC lifecycle

Troubleshoot and resolve pipeline failures, environment issues, and deployment blockers in a timely manner, escalating complex issues to the Infrastructure Lead as appropriate

Collaborate with the Security Architect to ensure that security scanning, vulnerability management, and compliance checks are embedded within pipeline workflows and aligned to the programme's security standards

Maintain comprehensive documentation for all pipeline configurations, tooling setups, and operational runbooks to ensure repeatability and knowledge continuity across the team

Support environment provisioning and infrastructure-as-code activities using tools such as Terraform, Ansible, or equivalent, coordinating with the broader infrastructure team

Contribute to the continuous improvement of DevSecOps practices, evaluating new tools and techniques and recommending enhancements to the Infrastructure Lead

Technical Expertise Required

Hands-on proficiency with CI/CD platforms such as Jenkins, Azure DevOps, GitLab CI, GitHub Actions, or equivalent

Strong experience with source code control and version management tools, particularly Git, including branching strategies and merge request workflows

Proficiency in code quality and security scanning tools such as SonarQube, Checkmarx, Snyk, OWASP ZAP, or equivalent

Experience with code packaging and artefact management tools such as Nexus, JFrog Artifactory, or equivalent

Familiarity with containerisation and orchestration technologies including Docker and Kubernetes

Experience with infrastructure-as-code tools such as Terraform, Ansible, or CloudFormation

Working knowledge of cloud platforms such as AWS, Azure, or GCP and their native DevSecOps tooling and services

Understanding of automated testing integration within CI/CD pipelines, including unit, integration, and regression test execution

Familiarity with monitoring and observability tools such as Prometheus, Grafana, ELK Stack, or equivalent to support pipeline and deployment health monitoring

Experience working within banking, financial services, or similarly regulated environments is advantageous