Lead DevSecOps Engineer

About The Company CBSbutler Holdings Limited, trading as CBSbutler, is a reputable and established recruitment agency specializing in delivering high-caliber IT, engineering, and technology talent to a diverse range of clients across various sectors. With a strong focus on quality, integrity, and innovation, CBSbutler has built a trusted reputation within the industry for connecting organizations with top-tier professionals. The company prides itself on its deep industry knowledge, excellent client relationships, and a commitment to supporting candidates throughout their career journey. As part of its mission, CBSbutler strives to facilitate impactful projects that drive technological advancement and operational excellence for its clients. About The Role We are seeking a highly skilled Lead DevSecOps Engineering Lead (MOD / MODCloud) to join a critical UK MOD digital transformation programme. This role offers an exceptional opportunity to contribute to national security initiatives by working on secure, innovative digital products within the Defence environment. The successful candidate will take a leadership position, guiding the implementation and governance of DevSecOps practices across multiple cloud platforms, including Microsoft Azure, AWS, and Oracle Cloud Infrastructure. This position is remote, offering flexibility while engaging in high-impact work that directly supports the MOD’s operational capabilities. The role involves collaborating with a leading technology partner to engineer secure, automated, and compliant cloud-based solutions that span several digital estates. The candidate will play a pivotal role in establishing best practices, embedding security controls, and ensuring the seamless delivery of mission-critical software products. This is a contract position initially lasting 6 months or more, with a daily rate of 645 inside IR35. An active SC security clearance is a prerequisite, reflecting the sensitive nature of the work involved. Qualifications The ideal candidate will possess significant hands-on experience in DevSecOps, cloud engineering, and security within a government or highly regulated environment. Essential qualifications include proven expertise with AWS, Kubernetes/EKS, Terraform, GitHub Actions, GitOps, Argo CD, Docker, Vault, Trivy, cert-manager, Grafana, Loki, Python, and Bash. Strong leadership skills, coupled with excellent stakeholder management and communication abilities, are critical for success. Experience working with distributed engineering teams and familiarity with UK Government or GDS delivery standards are highly desirable. An active SC security clearance is mandatory, demonstrating eligibility for working on sensitive MOD projects. Responsibilities Lead and embed DevSecOps engineering practices across multiple MOD digital products, ensuring security, automation, and compliance are integrated into every stage of the software development lifecycle.Design, implement, and govern secure CI/CD and GitOps pipelines to facilitate efficient and reliable software delivery.Integrate security scanning tools, vulnerability management processes, and compliance controls to maintain high security standards.Drive Infrastructure as Code initiatives using Terraform to enable scalable and repeatable cloud infrastructure deployment.Work with container orchestration platforms such as Kubernetes, Docker, and AWS EKS to deploy and manage cloud-native applications.Implement secrets management, identity, and access controls using tools like HashiCorp Vault to safeguard sensitive data.Establish observability, monitoring, logging, and audit mechanisms to ensure operational transparency and security compliance.Develop and promote secure-by-design engineering practices aligned with MOD security policies and standards.Coordinate efforts among DevSecOps engineers, developers, testers, and infrastructure teams to foster collaboration and ensure project success.Create and maintain security processes, technical standards, and operational runbooks to support ongoing operations and incident management.Support incident response activities, patch management, risk mitigation, and compliance audits to uphold system integrity and security. Benefits This role offers a competitive daily rate of 645 inside IR35, along with the opportunity to work remotely on a high-profile UK MOD project. The contract duration is initially six months, with potential for extension based on project requirements. Working on this programme provides exposure to cutting-edge cloud security practices, national security initiatives, and collaboration with leading defense technology experts. The position also offers professional development opportunities in a challenging and rewarding environment, with the chance to make a tangible impact on national security infrastructure. Equal Opportunity CBSbutler is an equal opportunity employer committed to fostering an inclusive environment for all employees and applicants. We value diversity and are dedicated to providing equal employment opportunities regardless of race, gender, age, disability, religion, sexual orientation, or any other protected characteristic. We believe that diverse teams drive innovation and excellence, and we are committed to supporting a workplace culture that respects and celebrates individual differences.