IT & Software

DevSecOps Engineer

Consortia

London · Greater London · United Kingdom

Overview

As the first Senior DevSecOps Engineer, you will own the security, compliance, and technical direction of a Fintech platform. You will integrate security into the DevOps lifecycle, shape tooling choices, and collaborate with engineering and stakeholders to ensure uptime in a regulated environment. The role emphasizes cloud-native infrastructure, cost-aware architecture, and robust governance. You will drive improvements across CI/CD, serverless and containerized deployments, and incident response. This is a mission-driven opportunity to influence both technical direction and regulatory-compliant operations.

Responsibilities
  • Own the technical direction for DevSecOps tooling and architecture
  • Integrate security and governance into DevOps processes
  • Build and maintain CI/CD pipelines (e.g., Jenkins) ensuring secure deployments
  • Develop and manage infrastructure for serverless (Lambdas) and containerized apps (Docker, RDS, Aurora Serverless)
  • Design and implement infrastructure as code with Terraform (and Terragrunt)
  • Lead AWS cost optimisation and infrastructure strategy
  • Ensure data encryption and prevent data leakage in a highly regulated environment
  • Create and maintain SOPs for compliance and operational efficiency
  • Manage incident response and monitoring (Datadog, PagerDuty)
  • Oversee access control and device management (1Password, Google Workspace, JumpCloud)
  • Coordinate backups and critical management in GCP and S3 environments
  • Automate processes via GitHub Actions
Key requirements
  • Senior-level DevSecOps experience
  • Strong AWS proficiency (well-architected setups, shared VPCs)
  • Hands-on automation with Terraform (Terragrunt a bonus)
  • Experience with CI/CD tooling (e.g., Jenkins) and security-focused deployments
  • Knowledge of data security, encryption, and leakage prevention
  • Familiarity with serverless architectures and event-driven design (Kafka)
  • Experience in regulated environments (ISO27001, FCA a bonus)
  • Exposure to monitoring/incident tools (Datadog, PagerDuty)
  • Access control and IAM practices
  • Collaborative, stakeholder-facing communication
  • collaboration
  • stakeholder management
  • problem-solving
  • AWS
  • Terraform
  • Terragrunt

Reference: WJ-747_31199326

Find more on GigBlows

This role is listed on GigBlows for discovery and search. Hiring decisions and applications are handled by the employer or their chosen application system.