Platform & Dev Sec Ops Lead

• Oversee the development and continuous improvement of the Digital Engineering Environment and DevSecOps capability
• Enable secure, scalable and high-quality digital delivery across the organisation
• Work with architects, engineers, security specialists and delivery teams to implement best practices
• Establish technical standards and ensure platforms support efficient and compliant software delivery
• Operate, develop and improve digital engineering platforms and environments
• Implement and support DevSecOps practices across CI/CD pipelines, Infrastructure as Code and automation tooling
• Design and maintain secure engineering environments, release controls and quality assurance processes
• Translate technical standards and guardrails into practical engineering solutions
• Manage platform risks, dependencies, constraints and improvement initiatives
• Support cloud security, secrets management, environment segregation and automated assurance controls
• Develop reusable tooling, templates and engineering standards
• Support governance, audit, assurance and accreditation activities through technical evidence and documentation
• Coach and support engineers and delivery teams in adopting DevSecOps best practice
• Provide technical recommendations on delivery, security, resilience, performance and cost trade-offs

Requirements

• Significant experience operating and managing digital engineering platforms within regulated environments
• Solid DevSecOps skills, including CI/CD pipelines, Infrastructure as Code, automation and cloud security
• Experience enabling multiple delivery teams through shared engineering platforms, tooling and standards
• Comprehensive knowledge of governance, assurance, audit, and accreditation requirements
• Experience implementing secure software delivery practices and engineering controls
• Knowledge of platform engineering principles and modern software delivery approaches
• Ability to identify and manage technical risks, dependencies and constraints
• Effective stakeholder engagement and communication skills
• Experience producing technical documentation and assurance evidence for governance purposes
• Effective written and verbal communication skills
• Experience working within highly regulated sectors such as defence, nuclear, energy, transport or government
• Experience with Microsoft Azure cloud platforms and associated security services
• Experience implementing Infrastructure as Code using tools such as Terraform or Bicep
• Experience with containerisation and orchestration technologies such as Docker and Kubernetes
• Knowledge of secure software development lifecycle (SSDLC) practices
• Experience supporting security accreditation and compliance activities
• Familiarity with monitoring, observability and platform performance management tools
• Experience developing platform engineering roadmaps and improvement strategies
• Experience mentoring engineers and promoting DevSec Ops best practice across teams
• Relevant cloud, security or DevOps certifications
• Must be able to satisfy clearance criteria for UK National Security Vetting
• Candidates will be required to undergo pre-employment screening

Core Competencies

Demonstrates expertise in managing digital engineering platforms and implementing DevSecOps practices, ensuring secure and compliant software delivery within regulated environments. Proficient in stakeholder engagement, technical documentation, and governance processes.

Highest-signal resume keywords

• DevSecOps Practices
• CI/CD Pipelines
• Infrastructure As Code
• Cloud Security
• Microsoft Azure

ATS Optimization Keywords

Hard Skills

• Digital Engineering Platforms
• Secure Software Delivery
• Platform Engineering Principles
• Technical Risk Management
• Monitoring Tools

Soft Skills

• Effective Communication
• Stakeholder Engagement
• Mentoring

Certifications & Qualifications

• Cloud Certifications
• Security Certifications
• DevOps Certifications

Industry Keywords

• Governance
• Audit
• Accreditation
• Regulated Environments
• SSDLC Practices

Tools & Technologies

• Terraform
• Bicep
• Docker
• Kubernetes