37 jobs found

Job title: Lead DevSecOps Engineering Lead (MOD / MODCloud) Rate: 645 per day inside ir35 Location: Remote Contract 6 months+ Active SC security clearance is required for this role We're looking for a Lead DevSecOps Engineer to take a key role on a major UK MOD digital transformation programme, working with a leading technology partner delivering secure digital products into the Defence environment. This is a genuinely high-impact MODCloud role, spanning multiple cloud estates and products across the MOD digital landscape, you'll help engineer and govern will be deployed across the MOD digital estate (MODCloud), including: Microsoft Azure - MODCloud ACE / i-ACE AWS - MODCloud ICE Oracle Cloud Infrastructure - OCI / MODCloud OCE You'll help establish consistent, secure and automated DevSecOps practices across multiple products and engineering teams, embedding security, compliance and automation throughout the software delivery lifecycle. Responsibilities: Lead and embed DevSecOps engineering practices across multiple MOD digital products Design and govern secure CI/CD and GitOps pipelines Integrate security scanning, vulnerability management and compliance controls Drive Infrastructure as Code using Terraform Work across Kubernetes / Docker / AWS EKS Implement secrets, identity and access management using technologies such as HashiCorp Vault Establish observability, monitoring, logging and audit controls Develop secure-by-design engineering practices aligned to MOD security requirements Coordinate DevSecOps engineers, developers, testers and infrastructure teams Create and maintain security processes, technical standards and operational runbooks Support incident response, patching, risk management and compliance activity Expereince required: You'll need strong hands-on experience across: AWS Kubernetes/EKS Terraform GitHub Actions GitOps Argo CD Docker Vault Trivy cert-manager Grafana Loki Python Bash You'll also need: Proven DevSecOps leadership experience UK Government / GDS delivery experience Strong stakeholder and communication skills Experience working across distributed engineering teams If you're an SC-cleared DevSecOps Lead who wants to work on genuinely mission-critical MOD technology, please feel free to submit your CV

Senior DevSecOps Engineer UK Wide 2 days per month in a chosen UK office Permanent Up to £95,000 + benefits We're recruiting for a Senior DevSecOps Engineer to join a large-scale technology and data environment delivering secure platforms for complex public-sector programmes. This is a hands-on engineering role with a strong focus on DevSecOps, Kubernetes, CI/CD, automation and secure platform delivery. You'll be working on technically interesting environments where reliability, security and repeatable deployment really matter. The role sits close to data and AI teams, so there is also exposure to MLOps, machine-learning workloads and modern data platforms, but the core requirement is strong DevSecOps / platform engineering capability. What you'll be doing Designing and delivering secure CI/CD pipelines across complex environments Building and supporting Kubernetes/container platforms Embedding security controls into engineering workflows Automating infrastructure and deployment processes using Python, Bash, YAML and IaC tooling Supporting secure deployment into restricted or highly controlled environments Working closely with engineering, data and AI teams to improve platform reliability and deployment standards Contributing to MLOps and ML deployment patterns where required Providing technical direction across DevSecOps, automation and platform architecture What we're looking for Strong background in DevSecOps, DevOps or Platform Engineering Hands-on experience with Kubernetes and Docker Strong CI/CD experience, ideally GitLab Good scripting capability in Python and/or Bash Strong Linux knowledge Experience with cloud and infrastructure automation Exposure to secure, regulated, government, defence or public-sector environments would be highly beneficial Experience with MLOps, ML infrastructure or supporting data science teams would also be useful The hiring team has been clear that they are not expecting somebody to tick every box. The priority is finding someone with genuine depth in DevSecOps and Kubernetes, rather than a CV containing a long list of technologies with limited hands-on experience. Security clearance Candidates must be eligible to obtain SC clearance, including the required UK residency criteria. Location This is a UK-wide opportunity with hybrid working. There will be a mix of home working, office-based work and occasional client-site requirements depending on the project. Salary: Up to £95,000, with some flexibility for particularly strong candidates. If you're a DevSecOps or Platform Engineer who enjoys working on secure, technically complex environments and wants exposure to data, AI and MLOps, get in touch for more information.

Enterprise Architect Shape the architecture behind advanced virtual engineering environments supporting sensitive UK defence and aerospace programmes. Synergize Consulting is seeking an experienced Enterprise Architect to play a pivotal role across Synthetics, ITEA and TLS digital engineering. This is an opportunity to influence how digital twins, Real Time simulation and virtual testing come together across the full systems engineering life cycle. You will lead the integration of a Virtual Environment solution into the wider Digital Engineering environment, bringing together people, processes and technology. Working closely with engineering teams, Product Owners and Delivery Managers, you will turn complex requirements into secure, practical architecture that supports testing, qualification, certification and training. The opportunity Your architecture will help engineering teams identify integration issues earlier through Software-in-the-Loop and Hardware-in-the-Loop testing. You will also shape the digital twin and digital thread capabilities connecting the wider engineering environment. Combining strategic influence with detailed technical design, your responsibilities will include: Developing and maintaining high-level and low-level designs. Leading Virtual Environment architecture across the full system life cycle. Aligning solutions with Secure by Design principles, governance and regulatory requirements. Advising stakeholders on architectural decisions, dependencies and delivery risks. Identifying opportunities to reuse architecture across digital engineering workstreams. Preparing and managing RFIs and RFQs, evaluating technologies and supporting proofs of concept. Working with internal teams, suppliers and technology partners to deliver a coherent architecture. What you will bring We are looking for an architect who can connect enterprise strategy with engineering delivery and communicate confidently with both technical and non-technical stakeholders. You will need: Active SC clearance or DV clearance Demonstrable aerospace and defence experience, delivering architecture within MOD, Defence Digital or UK aerospace environments. More than five years' experience in Enterprise or Business Architecture. Experience of Real Time simulation, digital twins and digital thread concepts. Experience architecting IT and software development environments. A strong understanding of system, data and technical architecture across the systems engineering life cycle. Experience working with defence prime contractors, system integrators and suppliers. Strong stakeholder management skills and experience working in Agile environments. A relevant degree and industry certification(s), such as TOGAF, ArchiMate, AWS/Azure Architect or CISSP. Availability to work onsite in Reading for at least 50% of your time. Experience that would strengthen your application Flight simulators or synthetic environments; Microsoft Azure; SAFe; CI/CD and DevSecOps; Docker or Kubernetes; Power BI; data warehousing; or Chartered Engineer status. Why apply? This role offers the chance to influence architecture with a direct impact on how complex aerospace and defence systems are engineered, integrated and tested. You will work at the intersection of enterprise architecture and advanced simulation, helping translate emerging technology into practical engineering capability. Apply now with your CV, confirming your current clearance, availability and relevant digital engineering or synthetic environment experience.

Application Security Engineer (12-Month Fixed Term Contract) Help Build Security into Products That Matter We're looking for an experienced Application Security Engineer to join our Security Engineering team on a 12-month fixed-term contract. This isn't a role where security sits on the side-lines. You'll be Embedded in product delivery, working directly with engineers, architects and product teams to ensure security is considered from the earliest design conversations through to deployment and beyond. You'll combine technical expertise with practical problem-solving, helping teams build secure solutions without slowing innovation. If you enjoy collaborating with developers, influencing technical decisions, and turning security challenges into workable solutions, we'd love to hear from you. What You'll Be Doing As the dedicated Application Security Engineer for a portfolio of customer-facing and digital products, you'll be trusted to: Partner with product and engineering teams to understand systems, data flows, users and business priorities. Review solution designs and facilitate threat modelling workshops, helping teams identify risks before they become problems. Provide practical, real-world guidance on secure architecture and development across applications, APIs, cloud services and integrations. Help teams embed security into their development pipelines through automation, tooling and security-by-design practices. Investigate, triage and prioritise vulnerabilities, translating technical findings into clear actions for development teams. Coordinate penetration testing activities and support teams through remediation and re-testing. Assess the security of SaaS platforms, third-party technologies and external integrations. Work closely with Security Operations, Identity & Access Management and Cloud Security colleagues where risks cross functional boundaries. Represent security interests within technical governance forums, providing balanced advice and escalating significant risks when required. Contribute to evolving security standards, secure development practices and application security maturity across the organisation. Maintain clear records of decisions, risks and recommendations, ensuring a smooth handover at the end of the contract. About You You're someone who enjoys solving problems, building relationships and making security relevant and actionable. You understand that the best security professionals don't just identify risks, they help teams address them in practical ways. You'll have experience across areas such as: Secure by Design principles Threat modelling Application security testing Vulnerability management Security risk assessment Secure software development practices Experience with technologies such as Java/Spring Boot, React, Node.js, Snowflake, Salesforce, Kubernetes/OpenShift, Snyk or Wiz would be beneficial, but we're equally interested in candidates who have gained relevant experience across different technology stacks and tooling. What We're Looking For You'll likely have: Experience working in Application Security, Product Security or Secure Software Engineering. A strong understanding of common application and API security risks, including authentication, authorisation, data protection and security misconfiguration. Experience reviewing architectures and facilitating threat modelling workshops using STRIDE or similar methodologies. Hands-on experience with security testing practices and tools, including SAST, software composition analysis, secrets detection, API security testing and infrastructure or container scanning. The ability to assess vulnerabilities through both a technical and business lens, helping teams focus on what matters most. Familiarity with modern engineering environments, including cloud platforms, CI/CD pipelines and containerised applications. Strong communication and stakeholder management skills, with the confidence to challenge constructively and influence decision-making at all levels. Who You'll Be Working With You'll be joining a collaborative and supportive Security Engineering function made up of specialists in: Application Security Penetration Testing Red Teaming Cloud Security Engineering Secure SDLC DevSecOps and CI/CD Security Software Development You'll also build strong relationships with architects, engineers, product managers and delivery teams across the business, helping create security solutions that work in the real world. Why Join Us? This is an opportunity to make a genuine impact. You'll have the autonomy to shape security outcomes, influence product decisions and work with teams that value security as an enabler rather than a blocker. If you're passionate about secure development, enjoy working closely with engineering teams and want to help build resilient products in a modern technology environment, we'd love to hear from you.

Application Security Engineer (12-Month Fixed Term Contract) Help Build Security into Products That Matter We're looking for an experienced Application Security Engineer to join our Security Engineering team on a 12-month fixed-term contract. This isn't a role where security sits on the side-lines. You'll be Embedded in product delivery, working directly with engineers, architects and product teams to ensure security is considered from the earliest design conversations through to deployment and beyond. You'll combine technical expertise with practical problem-solving, helping teams build secure solutions without slowing innovation. If you enjoy collaborating with developers, influencing technical decisions, and turning security challenges into workable solutions, we'd love to hear from you. What You'll Be Doing As the dedicated Application Security Engineer for a portfolio of customer-facing and digital products, you'll be trusted to: Partner with product and engineering teams to understand systems, data flows, users and business priorities. Review solution designs and facilitate threat modelling workshops, helping teams identify risks before they become problems. Provide practical, real-world guidance on secure architecture and development across applications, APIs, cloud services and integrations. Help teams embed security into their development pipelines through automation, tooling and security-by-design practices. Investigate, triage and prioritise vulnerabilities, translating technical findings into clear actions for development teams. Coordinate penetration testing activities and support teams through remediation and re-testing. Assess the security of SaaS platforms, third-party technologies and external integrations. Work closely with Security Operations, Identity & Access Management and Cloud Security colleagues where risks cross functional boundaries. Represent security interests within technical governance forums, providing balanced advice and escalating significant risks when required. Contribute to evolving security standards, secure development practices and application security maturity across the organisation. Maintain clear records of decisions, risks and recommendations, ensuring a smooth handover at the end of the contract. About You You're someone who enjoys solving problems, building relationships and making security relevant and actionable. You understand that the best security professionals don't just identify risks, they help teams address them in practical ways. You'll have experience across areas such as: Secure by Design principles Threat modelling Application security testing Vulnerability management Security risk assessment Secure software development practices Experience with technologies such as Java/Spring Boot, React, Node.js, Snowflake, Salesforce, Kubernetes/OpenShift, Snyk or Wiz would be beneficial, but we're equally interested in candidates who have gained relevant experience across different technology stacks and tooling. What We're Looking For You'll likely have: Experience working in Application Security, Product Security or Secure Software Engineering. A strong understanding of common application and API security risks, including authentication, authorisation, data protection and security misconfiguration. Experience reviewing architectures and facilitating threat modelling workshops using STRIDE or similar methodologies. Hands-on experience with security testing practices and tools, including SAST, software composition analysis, secrets detection, API security testing and infrastructure or container scanning. The ability to assess vulnerabilities through both a technical and business lens, helping teams focus on what matters most. Familiarity with modern engineering environments, including cloud platforms, CI/CD pipelines and containerised applications. Strong communication and stakeholder management skills, with the confidence to challenge constructively and influence decision-making at all levels. Who You'll Be Working With You'll be joining a collaborative and supportive Security Engineering function made up of specialists in: Application Security Penetration Testing Red Teaming Cloud Security Engineering Secure SDLC DevSecOps and CI/CD Security Software Development You'll also build strong relationships with architects, engineers, product managers and delivery teams across the business, helping create security solutions that work in the real world. Why Join Us? This is an opportunity to make a genuine impact. You'll have the autonomy to shape security outcomes, influence product decisions and work with teams that value security as an enabler rather than a blocker. If you're passionate about secure development, enjoy working closely with engineering teams and want to help build resilient products in a modern technology environment, we'd love to hear from you.

Senior DevOps Engineer AWS / Kubernetes / Terraform / CI/CD / Infrastructure as Code Oxfordshire (Hybrid - 2 days a week in the office) 85,000 - 110,000 DOE Want to be the senior voice on infrastructure, with real say over how software reaches production? This Senior DevOps Engineer role is with a growing UK technology company building AI-led products for customers who work in high-stakes sectors. You'll be the most experienced platform engineer in a small team, with direct influence over the tools, standards and priorities the engineering group works to. It's a permanent role in Oxfordshire, hybrid, with 2 days a week in the office. What You'll Be Doing Designing and running secure multi-account AWS environments, defined entirely as code Managing container platforms in the cloud and on-premises, with automated GitOps-style deployments Leading security reviews and hardening across the estate Owning monitoring, alerting and resilience, including regular backup and recovery testing Keeping cloud spend and capacity under control, and supporting compliance audits Handling incidents and coaching developers on secure delivery What You'll Bring A strong DevOps or SRE background, with recent hands-on AWS experience Deep Kubernetes experience, ideally including on-premises clusters, plus Helm Terraform, CI/CD pipelines and GitOps tooling, with Docker and Linux Experience managing artifact repositories and integrating single sign-on Scripting in Bash and Python or Go, and security testing built into pipelines Desirable: MLOps experience, Prometheus-style observability, security frameworks such as ISO 27001, active SC clearance What's On Offer Pension with employer contribution Private healthcare Generous holiday allowance Hybrid working, 2 days a week in the office Please note: You must be eligible for UK security clearance (BPSS and SC), which requires a UK passport and 5 years of continuous UK residency. Clearance can be sponsored for the right candidate. Apply today with your CV for this Senior DevOps Engineer role and we'll be in touch. This role may suit candidates who have held roles including: Senior Site Reliability Engineer, Cloud Platform Engineer, Senior AWS Engineer, DevSecOps Engineer, Kubernetes Engineer, Platform Engineer, Infrastructure Engineer Deerfoot Recruitment Solutions Ltd is a leading independent tech recruitment consultancy in the UK. For every CV sent to clients, we donate 1 to The Born Free Foundation. We are a Climate Action Workforce in partnership with Ecologi. If this role isn't right for you, explore our referral reward program with payouts at interview and placement milestones. Visit our website for details. Deerfoot Recruitment Solutions Ltd is acting as an Employment Agency in relation to this vacancy.

DV Cleared Software Developers Join a global technology organisation at the forefront of delivering secure, mission-critical digital platforms. As investment continues across high-security programmes, we're looking for experienced DV-cleared engineers to help design, build and operate resilient, cloud-native infrastructure that underpins some of the UK's most sensitive environments. The Opportunity Working as part of a highly skilled engineering team, you'll develop and support modern platforms using automation, cloud technologies and Infrastructure-as-Code. You'll play a key role in creating scalable, secure environments, improving deployment pipelines, and embedding security throughout the software delivery life cycle. This is an opportunity to work with cutting-edge technologies on projects where reliability, innovation and security are paramount. What You'll Bring Strong software engineering experience using languages such as Java, Python or C# Hands-on experience with modern DevOps tooling, including CI/CD platforms such as Jenkins or GitLab Experience working with cloud platforms (AWS, Azure or Google Cloud) Knowledge of containerisation technologies including Docker and Kubernetes Experience with Infrastructure-as-Code tools such as Terraform or Ansible Ability to thrive in a collaborative, fast-moving engineering environment Active UK Developed Vetting (DV) clearance is essential Desirable Experience Background in Platform Engineering, DevOps or Site Reliability Engineering Experience implementing secure-by-design or DevSecOps practices Previous work within defence, national security, government or other highly regulated environments If you're passionate about building secure, automated platforms and want to work on technology that supports nationally important programmes, we'd love to hear from yo

Location: Crawley, United Kingdom Thales is a global technology leader with more than 83,000 employees on five continents. With over 7,500 people in the UK, operating across defence, space, aerospace, and digital security, we help build a future we can all trust. Thales supports the security and stability of our nation by providing extraordinary technology to our customers, as well as delivering social value to the UK with our products and services. Thales is transforming the way in which we deliver our tools to engineers. In this role you will be helping to build the next generation of Engineering Environments in the UK using modern deployment methods on a cloud based platform. As a Technical Product Owner, you will work both as part of an agile development team and as part of our Technical Leadership team. You will maximise the value of the products delivered by the development / deployment team and are in charge of satisfying the needs of the internal customers. You will also act as the primary interface between the development team, the Portfolio Product Owner and the end users of the engineering environments. You will also act as the Technical Authority/Architect for your specific area. Key responsibilities: Represents the engineering customers/users of the Engineering Environments. Specifies the needs, validates the acceptance criteria and approves the completed features. Defines the order in which the features for their team will be developed and works with the Portfolio Product Owner and other Product Owners to ensure that this fits with the objectives for the overall team. Takes important decisions concerning the direction the solutions for their team. Is accountable for the Product Backlog for their team in terms of content and priorities. Collects feedback from end users and other stakeholders during iteration reviews Right for this role? Ideally you'll have a software or systems engineering background in order to understand and credibly represent & promote best practice ways of working and tooled up processes. One of these roles will champion the non-LEWIS applications (old and new, and how we archive programme work securely), and the other will be more cloud software development environment biased. We recruit at many levels so we would be very interested to hear from you regardless of your length of experience. However, the following would be very beneficial: Thorough understanding of, and experience of applying, the current best practices for software development including: DevSecOps, Agile, CI/CD, TDD, BDD, XP and Lean. Understanding of both cloud and secure development environments to be able to architect and improve both existing and new bespoke environments. Ability to define and implement a suite of service offerings to support their architected development environments including required tooling, infrastructure, and internal services. Good understanding of cloud and enabling technologies and practices including Kubernetes, Containers, GitOps. Experience in some or all of the following software applications is a plus: Attlassian Suite (Jira, Bitbucket, Confluence) Jfrog Platform (Artifactory/XRay) GitLab Black Duck Siemens Polarion Thales is a great place to work so diversity, integrity and a passion for what we do are very important drivers for us. We are looking for people from a broad range of engineering disciplines, so no matter your background we would love to hear from you. Benefits: Performance-related bonus Half day every Friday, usually finishing around 13:00 28 days annual leave (plus bank holidays) with opportunity to buy up to 40 hours/year (pro rata) 24 hours volunteering paid for Private healthcare Pension scheme Life cover 24/7 Employee Assistance Program and access to mental wellbeing app Employee discount shopping schemes on major brands and retailers Gym membership discounts Security Clearance Requirement: Due to the nature of the work that we do at Thales, many of our roles are subject to security restrictions. This role requires you to be a UK National and achieve Security Clearance (SC) without any caveats. It would be advantageous if currently held, however, if not currently held, it is a requirement that the successful applicant undergo, achieve, and maintain SC Clearance prior to commencing employment. If approved by the MOD, a dual national from a non-ITAR country may be considered. To be eligible for full SC, you generally need to have resided in the UK for the last 5 years. In some circumstances, a minimum of 3 years' residence in the UK over the last 5 years may be accepted, with additional overseas checks. Please visit the UKSV website for further guidance: . At Thales, we ensure equal opportunities, pay and working conditions for all. The benefits we offer include private medical insurance, buying or selling annual leave, cycle to work schemes, employee discounts, paid volunteering day, stocks and shares, annual bonus and much more depending on the role. Read more about our benefits here. We are committed to creating a workplace where everyone feels valued for who they are and the unique strengths they bring. Discover more about our programmes, employee networks, wellbeing policies, and inclusive features here. If this role isn't quite right for you, we encourage you to join our talent community where your details will be shared with our recruitment teams for other potential opportunities. Join the Talent Community here. Join Thales in the UK - Innovate with us and shape the future!

Job title: IAM Design SME (Zero Trust & Cloud Architecture) Rate: 540 per day Location: Sheffield - 3 days per week Contract: 6 months rolling We're looking for an experienced IAM Design SME to join a major transformation programme at a leading UK bank, delivering next-generation Identity and Access Management (IAM) capabilities. This is a high-impact opportunity to take technical ownership of identity architecture, define secure cloud-native solutions and influence how identity services are designed, integrated and delivered across a complex global enterprise. You'll act as a technical authority across the programme, translating complex security, business and regulatory requirements into robust, scalable and supportable designs. You'll be responsible for: Producing end-to-end High-Level and Low-Level Designs (HLDs/LLDs). Defining IAM architecture across Human, Agent and Workload Identity. Designing Zero Trust, authentication, authorisation and federation solutions. Developing cloud-native architectures across GCP, Kubernetes and service mesh environments. Defining secure API, service-to-service authentication and event-driven integration patterns. Designing Policy-as-Code, PKI, certificate lifecycle and secrets management solutions. Driving architecture governance, design assurance and technical decision-making across multiple workstreams. Working closely with architects, engineering teams and senior stakeholders to deliver production-ready solutions. Expereince: We're looking for someone with strong enterprise-level design experience and a proven track record delivering complex IAM or security architecture. Key experience includes: Enterprise Architecture and Identity & Access Management (IAM). Authentication, authorisation, federation and OIDC, OAuth2, SAML and SCIM. Zero Trust, Agent Identity and Workload Identity. GCP, Kubernetes, service mesh and cloud architecture. API security, event-driven architecture and Policy-as-Code (OPA/Cedar). PKI, certificates, secrets management and DevSecOps/CI/CD. High availability, resilience and security architecture. Architecture governance, stakeholder engagement and technical leadership. If you're an IAM design specialist who can bridge enterprise architecture, identity security and hands-on engineering design, please feel free to submit your CV

Senior Java Quarkus Full Stack Engineer - 12 months - Halifax (2 days)- Inside IR35 We are looking for a Senior/Lead Full Stack Cloud Engineer to join a leading UK banking client on a 12-month hybrid contract based in Halifax. You will design, build and run secure, scalable, cloud-native applications using Java, Quarkus, React and Google Cloud Platform. The role covers the full development life cycle, from design to production support, and carries technical leadership, engineering standards and mentoring responsibility. 2 days per week on-site are required. Key Responsibilities: Design, build and test enterprise applications in Java and Quarkus, with React user interfaces Develop secure, versioned REST APIs and independently deployable microservices Build event-driven solutions on GCP Pub/Sub: retries, idempotency, dead-letter handling, schema versioning Deploy and run workloads on Cloud Run and GKE, using Docker and Kubernetes Build CI/CD and DevSecOps pipelines, with automated testing and security scanning Apply security by design: IAM, Secret Manager, secure coding and threat modelling Own observability and production support: logging, metrics, tracing, incidents and root cause analysis Provide technical leadership: set standards, review designs and code, and mentor engineers What You Will Ideally Bring : 8+ years' software engineering experience, with distributed cloud-native systems Advanced Java (17+), Quarkus, microservices and API development React, TypeScript/JavaScript, HTML5 and CSS3 GCP: Cloud Run, GKE, Pub/Sub, Cloud Build, IAM, Secret Manager Event-driven architecture and messaging patterns Docker and Kubernetes CI/CD, DevSecOps and Git-based development TDD/BDD, with automated unit, integration and API testing Observability, monitoring and production support Cloud DevOps skills and application monitoring (desirable) Proven technical leadership, mentoring and communication with technical and non-technical stakeholders Contract Details Duration: 12 months initial Rate: £375-410 per day Determination: Inside IR35 Location: Halifax (Hybrid) Senior Java Quarkus Full Stack Engineer - 12 months - Halifax (2 days)- Inside IR35

Senior Software Engineer The Role: This is a highly varied role giving the successful candidate the opportunity to work across multiple projects and at all stages of the Software Development Lifecycle. Whilst focused on software development, this role also provides the opportunity to participate in software design at all levels. This will include work on: Research & Development Internally and externally funded research and development products investigating and developing low TRL technologies. Product Development Development and support of Synoptix products, primarily in the AI and Computer Vision (object detection and track) domains. Service Development Development of Synoptix services, including our upcoming AI Assurance service offering. Key Responsibilities: Leading Software Development Projects Act as part of a multidisciplinary team to develop products and services. This will include Systems Engineers, Security Engineers, Product Managers and others as required. Support the wider team in project planning, requirements definition and requirements analysis. Lead software design, development, testing, deployment and maintenance for a range of AI and Computer Vision products. Contribute to a culture of continuous improvement, identifying opportunities to enhance our processes, tooling, infrastructure and development frameworks. Providing Software Engineering Subject Matter (SME) Expertise Act as part of multidisciplinary teams in delivering engineering services to Synoptix clients. Provide SME guidance to Synoptix clients on the architecture and design of their software solutions. Provide technical documentation, briefings and presentations to internal and external stakeholders at all levels of seniority. Key Skills: We are interested in any of the following skills, but they are not essential for you to apply: Strong proficiency in Python with experience in C++ development Creative problem-solving skills Experience with Linux operating systems (e.g. Red Hat, Ubuntu) Experience working within a variety of development frameworks and practices e.g. DevOps, DevSecOps, SCRUM, MLOps, XP. Experience with data analysis and manipulation tools (e.g. Pandas) Experience of a broad section of the Software Development Lifecycle (SDLC) with specific focus on: Design (Architecting, High-Level Design and Low-Level Design) Development Testing Deployment & Maintenance Experience of using the Unified Modelling Language Excellent communication skills Desirable Skills: Experience in the development of computer vision related products and services. Experience with visual processing libraries; OpenCV, TensorFlow, PyTorch etc. Experience in personnel management Experience operating as part of a multidisciplinary team Experience developing and/or implementing reference architectures Experience in the development of Test Harnesses Benefits: Annual Company Bonus Based on company performance 25 Days holiday not including bank holidays with the option to buy/sell up to 5 days Flexible hybrid working arrangements Continuous professional development including incentives Access to online Udemy training facility to support grade specific learning pathways Electric car scheme Bike to work scheme Private health care About Us: Synoptix was formed in 2011 to provide engineering solutions across various technical industries. We have evolved from a company established and focussed on Systems Thinking principles into an Engineering company providing solutions and services across three key capabilities: Systems, Cyber & InfoSec and Technology. What makes us stand out is how we engage in the crossover areas between these disciplines, combining our strengths to provide a truly bespoke, market leading approach. Our engineering competence is bolstered by expertise in commercial, legal, financial and resource, thereby ensuring that we uphold excellence in our product and service offerings. Please note that due to the nature of our projects we can only accept Sole UK National candidates who will need to be eligible to obtain UK Security Clearance. By applying to this position, you are confirming that you consent to the retention of your personal data. Your data is held securely on our own premises and under the terms of the Data Protection Act (2018). It will be treated as confidential, and will not be transferred to any third party, or to any other jurisdiction without your consent. We will not hold any data for any longer than is necessary for us to fulfil our obligations and will remove any data at your written request.

Azure Cloud Security Engineer Hybrid 1day/wk Evaluate new security technologies and cloud services, performing engineering work and security analysis to determine if solutions should be pursued, and subsequently implementing them as required, focusing on cloud-first and cloud-native technologies. Develop cloud security solutions by applying the principles of Security as Code using cloud automation tooling and adhering to industry best practices. Collaborate closely with Security Architects to define and own the cloud security strategy, ensuring a continuously updated and secure environment. Establish cloud security best practices and develop, construct, and evaluate cloud-native services that offer necessary guardrails for developers. Validate and ensure that cloud solutions meet security standards, are properly governed, and delivered in accordance with guidelines. Embrace agile working practices, collaborating with teams across engineering disciplines and strategic partners to release enterprise-class cloud services. About you Relevant certifications (e.g., Azure Security Engineer, CCSP, CISSP, CCSK) are highly desirable. Proven experience in designing, implementing, and securing cloud environments, with a strong emphasis on Microsoft Azure services. Strong understanding of regulatory compliance requirements (e.g. GDPR, ISO 27001, NIST) and experience implementing security controls to meet those requirements. In-depth knowledge of cloud security best practices, network security, identity and access management, encryption, and secure coding principles. Hands-on experience with Azure Kubernetes Service (AKS) and microservices architecture. Familiarity with DevSecOps methodologies and tools, enabling the seamless integration of security into the development process. Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms. In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL. Familiarity with scripting toolsets and automation with Microsoft ARM, BICEP, PowerShell, Python. Track record of successfully designing, building, and deploying scalable, secure, and highly available security infrastructures using Azure. Strong proficiency in leveraging data and advanced analytics to drive decision-making and continuously enhance security solutions. Expertise in utilizing Azure DevOps to drive efficient and collaborative development processes, including the development of security solutions and updates in code.

At CV-Library, we have a simple vision: to help the world to work and we are looking for exceptional and talented people to help us realise this vision in both UK and overseas markets. We are in a period of focused internal investment, following a year of key strategic acquisitions and significant investment across all parts of the business, from Tech and Data to People and HR, there's never been a more exciting time to join us or a better place to grow your career! The Role Hours: Monday-Friday, 9:00-17:30 Location: Fleet Working Pattern: Hybrid This is a security role built for someone who wants to own the threat, not just log it. As Security Engineer, you'll be the person who understands what's actually at risk across a modern Cloud native microservice platform and our internal IT estate, from SIEM alerts to Microsoft 365 endpoint security, and who sets the priorities that matter. You won't be buried in compliance paperwork. You'll direct a capable Platform Ops team on remediation while you stay focused on the threat picture, the tooling and the DevSecOps thinking that keeps CV-Library ahead of it. You'll report directly to the Platform & Service Operations Manager, with a genuine mandate to shape how security is done, not just document it. Compliance still matters, and you'll keep ISO 27001 documentation and audit evidence in good shape as you go, but it's the by-product of doing security well, not the job itself. Responsibilities: Own the day-to-day management of security alerts, investigations and incidents across CV-Library's technology estate Monitor emerging cyber threats and threat intelligence, assessing potential risks and recommending improvements to security controls Lead the initial response to security incidents, coordinating containment and remediation activities with relevant technical teams Maintain incident records, conduct post-incident reviews and ensure lessons are learned are embedded into processes, tooling and controls Manage and continuously improve the organisation's security tooling, including SIEM, endpoint protection, vulnerability management and cloud security solutions Take ownership of endpoint and Microsoft 365 security, including device security, conditional access policies and identity protection controls Define and maintain security standards and guardrails for cloud infrastructure and software delivery, working closely with Platform DevOps teams Manage identity and access management processes, supporting user provisioning, access reviews and least-privilege principles Act as the security subject matter expert, providing guidance on infrastructure, platform and application changes Oversee the vulnerability management lifecycle, ensuring security weaknesses are identified, prioritised and remediated effectively Coordinate external penetration testing activities and track remediation actions through to completion Maintain security documentation, policies and audit evidence, supporting ongoing ISO 27001 compliance and certification requirements Apply GDPR and data protection principles to ensure security controls, processes and documentation meet regulatory expectations Support supplier and third-party security assessments, helping to identify and manage external risks Assess the secure use of AI technologies across the business and champion a strong security culture by promoting best practice across best technology and non-technical teams What we're looking for Strong technical knowledge of security tools, frameworks and best practice Solid understanding of cloud-native infrastructure (AWS, Kubernetes/EKS) sufficient to assess and prioritise risk and to direct Platform Ops on remediation, without owning infrastructure changes directly Experience with penetration testing engagement and vulnerability management processes Understanding of endpoint protection technologies and policy configuration, including Microsoft 365 security tooling (e.g. Defender, Intune, Conditional Access) Working knowledge of Identity and Access Management principles Strong incident response and threat intelligence skills, including SIEM-based monitoring and triage Familiarity with security accreditations such as ISO 27001 and what they require operationally Working knowledge of UK GDPR and data protection principles, particularly as they relate to security control and audit documentation Excellent communication skills, able to convey security matters clearly to both technical and non-technical audiences We are actively committed to promoting a fully diverse and inclusive workforce and we welcome applications for this role from all candidates who meet the key requirements. Please do not hesitate to get in touch should you require any reasonable adjustments to assist with your application.

Technical Lead Full Stack Developer (TypeScript, JavaScript, Node) Location: Hybrid working Salary: Competitive + benefits We're working with a fast-growing UK SaaS technology company that builds data-driven digital products used by commercial teams to better understand and engage with their customers. They are now looking for an experienced technical lead full stack developer to play a key role in shaping and delivering their next generation of customer-facing platforms. This is a hands-on technical leadership role where you'll be involved from early design through to production delivery, working with a modern cloud-based stack and deploying to live environments on a daily basis. The Role Lead technical delivery across a high-performing development squad (10+) Contribute to solution design, system architecture and domain modelling Build proof-of-concepts and spike complex or uncertain areas of work Break down requirements into deliverable epics and user stories alongside product and initiative managers Develop and deliver production-ready code across the full stack Ensure high standards of quality, maintainability, performance and security Support and improve live systems once deployed Influence technical direction, tooling and best practice across the wider engineering function Tech Environment You'll work with a modern stack including: Node.js microservices JavaScript & TypeScript Vue.js Redis, SQL Server & Snowflake AWS cloud infrastructure CI/CD pipelines and DevSecOps practices About You Strong full stack development experience (ideally 10+ years) 5+ years of JavaScript and TypeScript experience Solid background in system design and scalable architectures Experience building large, production SaaS platforms A clean-code mindset (SOLID principles, design patterns, testable code) Experience working in mature CI/CD and continuous deployment environments A commercial mindset when designing and delivering software Excellent collaboration skills and confidence working with stakeholders Interest in using AI to accelerate and improve software development A passion for performance, security and engineering best practice Degree in Computer Science or equivalent real-world experience What's On Offer Competitive salary and benefits package Hybrid working Opportunity to join a scaling UK SaaS business Strong engineering culture with a focus on quality and continuous improvement Supportive, collaborative working environment Community and charity initiatives, including volunteer days Send your CV across to me on email (url removed) or call (phone number removed) for more information. Spectrum IT Recruitment (South) Limited is acting as an Employment Agency in relation to this vacancy.

Key Responsibilities: Produce High Level Designs (HLDs) and Low Level Designs (LLDs) for identity capabilities. Define end-to-end Technical Solutions across business, application, data and infrastructure domains. Translate business, security and regulatory requirements into technical solutions. Develop reference architectures, patterns and design standards for the programme. Define integration patterns between identity platforms, applications and infrastructure. Design cloud-native solutions for GCP and Kubernetes environments. Define authentication, authorisation and federation architectures. Design Agent Identity, Human Identity and Workload Identity capabilities. Define Zero Trust security architecture and trust boundaries. Design API security, service-to-service authentication and workload authentication patterns. Develop event-driven integration architectures using messaging and asynchronous processing. Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code. Define secrets management, certificate lifecycle and PKI integration patterns. Design resilience, disaster recovery and high availability architectures. Ensure solutions meet non-functional requirements for security, scalability, resilience and performance. Produce architecture decision records (ADRs) and design documentation. Support governance through Architecture Review Boards and Design Authorities. Perform solution assurance and technical design reviews across supplier deliveries. Identify technical risks, assumptions, constraints and dependencies. Collaborate with Enterprise Architecture to ensure alignment with strategic architecture. Work with Product Owners to refine technical requirements and delivery priorities. Support engineering teams throughout implementation, testing and production readiness. Mentor engineers and promote engineering best practice. Evaluate new technologies and vendor products against programme requirements. Contribute to roadmap planning and future-state architecture. Key Skills & Experience: Enterprise Architecture Identity and Access Management (IAM) Authentication and Authorisation Zero Trust Architecture Agent Identity and Workload Identity Identity Federation (OIDC, OAuth2, SAML, SCIM) Cloud Architecture (GCP) Kubernetes and Service Mesh API Architecture and Security Event-driven Architecture Policy-as-Code (OPA/Cedar) PKI, Certificates and Secrets Management DevSecOps and CI/CD High Availability and Resilience Design Security Architecture Architecture Governance Stakeholder Management Technical Leadership

About Expleo Expleo is a trusted global partner for end-to-end engineering, technology, and consulting services. We help organisations accelerate innovation, improve operational efficiency, and deliver complex transformation programmes across multiple industries including automotive, financial services, aerospace, defence, energy, and public sector. We combine deep technical expertise with a collaborative and people-focused culture, enabling our teams to solve challenging business problems through innovative technology solutions. The Role We are seeking a highly capable Cloud & DevOps Engineer to join our growing technology team. This role will play a key part in supporting, maintaining, and modernising cloud-hosted applications and delivery platforms across multiple product teams. You will be responsible for troubleshooting complex CI/CD environments, supporting cloud infrastructure across AWS and Azure, investigating production issues, enhancing platform security, and contributing to the development and modernisation of enterprise applications. This is an excellent opportunity for a hands-on engineer who enjoys working across infrastructure, cloud, software development, and DevSecOps disciplines while driving continuous improvement and engineering excellence. Cloud & Platform Engineering Troubleshoot, analyse, and resolve issues within CI/CD pipelines across multiple teams and environments. Support and maintain deployment pipelines using: Concourse (Fly CLI) Azure DevOps Kubernetes-based platforms Manage and optimise cloud infrastructure hosted within AWS and Microsoft Azure. Ensure cloud environments remain secure, reliable, scalable, and operationally efficient. Monitor platform performance and availability using cloud-native monitoring tools. Investigate and resolve infrastructure and deployment-related issues. Application Development Design, develop, enhance, and support applications using C# and .NET technologies. Apply Clean Architecture and Domain-Driven Design (DDD) principles to create scalable and maintainable solutions. Contribute to technical design decisions and solution architecture discussions. Support software lifecycle management, releases, and ongoing maintenance activities. DevOps & Containerisation Build, maintain, and improve containerised deployment solutions using Docker. Support Kubernetes deployments and associated tooling. Automate operational and deployment processes wherever possible. Improve development workflows and engineering productivity through automation. Security & Modernisation Conduct security reviews and vulnerability remediation activities. Assess and remediate security findings within legacy TypeScript and React applications. Support application, dependency, and infrastructure upgrades. Drive modernisation initiatives to ensure platforms remain supported, secure, and aligned with current best practices. Implement security improvements based on audit findings and threat assessments. Incident Management & Operational Support Investigate production incidents across infrastructure, application, and deployment layers. Perform root cause analysis and implement preventative measures. Coordinate resolution activities with cross-functional teams and stakeholders. Contribute to operational support, monitoring, and continuous service improvement activities.

Description At , we are on a mission to find and work with leading banks all around the world who have the ambition to build rapid growth businesses, on our technology. Engine is Starling's software-as-a-service (SaaS) business, the technology that was built to power Starling Bank, and a year ago we split out as a separate business. has seen exceptional growth and success, and a large part of that is down to the fact that we have built our own modern technology from the ground up. The Engine technology platform is now available to banks and financial institutions all around the world, enabling them to benefit from the innovative digital features, and efficient back-office processes that has helped achieve Starling's success. Our technologists are at the very heart of Engine and enjoy working in a fast-paced environment that is all about building things, creating new stuff, and disruptive technology that keeps us on the cutting edge of fintech. We operate a flat structure to empower you to make decisions regardless of what your primary responsibilities may be, innovation and collaboration will be at the core of everything you do. Help is never far away in our open culture, you will find support in your team and from across the business, we are in this together! The way to thrive and shine within Engine is to be a self-driven individual and be able to take full ownership of everything around you: From building things, designing, and discovering to sharing knowledge with your colleagues and making sure all processes are efficient and productive to deliver the best possible results for our customers. Our purpose is underpinned by five values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness. Hybrid Working We have a Hybrid approach to working here at Engine - our preference is that you're located within a commutable distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling - As a Security Engineer at Engine, you'll be working on helping to keep our infrastructure secure and compliant and our staff safe and productive. You'll be working on projects covering identity and access management, cloud and network security, vulnerability management, security monitoring, security hardening, compliance reviews, and more. It's a very varied role with lots of close interaction with the infrastructure, security engineering, cross-cutting and compliance teams. We are looking for an experienced Senior level GCP Security Engineer to join our established Security Engineering team, working closely with Information Security, Infrastructure and the various Engine Technology teams to make sure security is at the heart of all our technical processes. As our subject matter expert, you will take ownership of engineering the security foundations of our Google Cloud Platform environment. This is a hands-on role for a specialist with a proven track record of designing, building, and automating security controls specifically for GCP, including hardened GKE clusters. Engine by Starling engineers are excited about helping us deliver new features, regardless of what their primary tech stack may be. Hear from the team in our latest Blog or our case studies with Women in Tech. As a GCP Security Engineer, you will: Collaborate with stakeholders to define our Google Cloud security architecture (cloud identity, runtime security, security posture) Design, document, build and maintain a secure and scalable infrastructure on GCP using Infrastructure as Code Be part of the team responsible for safeguarding our systems, applications and data by ensuring secure user access, authentication and authorisation mechanisms are in place Engineer and automate technical controls within GCP to ensure and demonstrate continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actions Lead incident response efforts, including investigation and remediation of security breaches Support our internal security awareness and training programs, advocating the DevSecOps mindset that we have created across our technology teams Requirements We're open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. If you have an innate passion for security and care enough to find elegant solutions to difficult problems, we'd love to hear from you. What skills are essential: Mature understanding of cloud security architecture, with deep expertise in GCP and a proven track record Experience creating a GCP landing zone, configuring services such as organisation policies and VPC Service Controls A deep understanding of GCP IAM and its limitations Experience with service-oriented architecture using containers, distributed systems and immutable infrastructure on GCP (including GKE, Compute Engine, Shared VPC and Cloud SQL) Expertise in Kubernetes, securing clusters (GKE) and meshes (Cilium is preferable), networking best practices and RBAC implementation (CKA, CKS qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management on GCP - Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager - including cryptographic key ceremonies Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI/CD Experience configuring and utilising cloud-native security logging, monitoring and detection services Strong programming skills - in security we write our own scripts for automation in Python, Go and other languages while contributing to open-source tools so we can utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications The ability to document security requirements from various stakeholders Excellent problem-solving, communication and active listening skills with an innate passion for security The ability to identify security gaps and create solutions to minimise risk and impact to us A proactive approach to staying updated with the latest security threats, vulnerabilities and mitigation techniques Thorough understanding of the incident response process (preparation, identification, containment, eradication, recovery, lessons learned) What skills are desirable: In-depth knowledge of network security, including core routing and switching concepts (TCP/IP, BGP, VPNs), security controls (firewalls, WAFs, IDS/IPS), and practical experience designing hybrid connectivity between GCP and on-premise environments Experience with data-residency and regulated-workload controls such as Assured Workloads and Access Transparency, relevant to deploying per-market for different banks' regulators Hands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2, ISO 27001 and PCI DSS / 3DS Container security knowledge including container image provenance (e.g. Sigstore, Notary) with an in-depth knowledge of container runtimes, and an understanding of integrating security into the software development lifecycle Experience performing secure code reviews and security approvals, including the use of static and dynamic application security testing (SAST / DAST) tools Experience in cryptography management and enhancements Relevant security certifications such as ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty or GCP Professional Cloud Security Engineer The main part of our tech stack is listed below. We don't ask that you have experience in all of it, but if you do, that's great! Java, which makes up the majority of our backend codebase GCP and AWS - we're cloud-native Microservice-based architecture Kubernetes (GKE on GCP, EKS on AWS) TeamCity for CI/CD (with multiple production releases per day) Terraform and Grafana RDS and CloudSQL for PostgreSQL Our Interview Process: Interviewing is a two-way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team: Initial interview with an Engineer - 45 minutes Take-home technical test, to be discussed in the next interview Technical interview with some Engineers - 1 . click apply for full job details

Description At , we are on a mission to find and work with leading banks all around the world who have the ambition to build rapid growth businesses, on our technology. Engine is Starling's software-as-a-service (SaaS) business, the technology that was built to power Starling Bank, and a year ago we split out as a separate business. has seen exceptional growth and success, and a large part of that is down to the fact that we have built our own modern technology from the ground up. The Engine technology platform is now available to banks and financial institutions all around the world, enabling them to benefit from the innovative digital features, and efficient back-office processes that has helped achieve Starling's success. Our technologists are at the very heart of Engine and enjoy working in a fast-paced environment that is all about building things, creating new stuff, and disruptive technology that keeps us on the cutting edge of fintech. We operate a flat structure to empower you to make decisions regardless of what your primary responsibilities may be, innovation and collaboration will be at the core of everything you do. Help is never far away in our open culture, you will find support in your team and from across the business, we are in this together! The way to thrive and shine within Engine is to be a self-driven individual and be able to take full ownership of everything around you: From building things, designing, and discovering to sharing knowledge with your colleagues and making sure all processes are efficient and productive to deliver the best possible results for our customers. Our purpose is underpinned by five values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness. Hybrid Working We have a Hybrid approach to working here at Engine - our preference is that you're located within a commutable distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling - As a Security Engineer at Engine, you'll be working on helping to keep our infrastructure secure and compliant and our staff safe and productive. You'll be working on projects covering identity and access management, cloud and network security, vulnerability management, security monitoring, security hardening, compliance reviews, and more. It's a very varied role with lots of close interaction with the infrastructure, security engineering, cross-cutting and compliance teams. We are looking for an experienced Senior / Staff level GCP Security Engineer to join our established Security Engineering team, working closely with Information Security, Infrastructure and the various Engine Technology teams to make sure security is at the heart of all our technical processes. As our subject matter expert, you will take ownership of engineering the security foundations of our Google Cloud Platform environment. This is a hands-on role for a specialist with a proven track record of designing, building, and automating security controls specifically for GCP, including hardened GKE clusters. Engine by Starling engineers are excited about helping us deliver new features, regardless of what their primary tech stack may be. Hear from the team in our latest Blog or our case studies with Women in Tech. As a GCP Security Engineer, you will: Collaborate with stakeholders to define our Google Cloud security architecture (cloud identity, runtime security, security posture) Design, document, build and maintain a secure and scalable infrastructure on GCP using Infrastructure as Code Be part of the team responsible for safeguarding our systems, applications and data by ensuring secure user access, authentication and authorisation mechanisms are in place Engineer and automate technical controls within GCP to ensure and demonstrate continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actions Lead incident response efforts, including investigation and remediation of security breaches Support our internal security awareness and training programs, advocating the DevSecOps mindset that we have created across our technology teams Requirements We're open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. If you have an innate passion for security and care enough to find elegant solutions to difficult problems, we'd love to hear from you. What skills are essential: Mature understanding of cloud security architecture, with deep expertise in GCP and a proven track record Experience creating a GCP landing zone, configuring services such as organisation policies and VPC Service Controls A deep understanding of GCP IAM and its limitations Experience with service-oriented architecture using containers, distributed systems and immutable infrastructure on GCP (including GKE, Compute Engine, Shared VPC and Cloud SQL) Expertise in Kubernetes, securing clusters (GKE) and meshes (Cilium is preferable), networking best practices and RBAC implementation (CKA, CKS qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management on GCP - Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager - including cryptographic key ceremonies Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI/CD Experience configuring and utilising cloud-native security logging, monitoring and detection services Strong programming skills - in security we write our own scripts for automation in Python, Go and other languages while contributing to open-source tools so we can utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications The ability to document security requirements from various stakeholders Excellent problem-solving, communication and active listening skills with an innate passion for security The ability to identify security gaps and create solutions to minimise risk and impact to us A proactive approach to staying updated with the latest security threats, vulnerabilities and mitigation techniques Thorough understanding of the incident response process (preparation, identification, containment, eradication, recovery, lessons learned) What skills are desirable: In-depth knowledge of network security, including core routing and switching concepts (TCP/IP, BGP, VPNs), security controls (firewalls, WAFs, IDS/IPS), and practical experience designing hybrid connectivity between GCP and on-premise environments Experience with data-residency and regulated-workload controls such as Assured Workloads and Access Transparency, relevant to deploying per-market for different banks' regulators Hands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2, ISO 27001 and PCI DSS / 3DS Container security knowledge including container image provenance (e.g. Sigstore, Notary) with an in-depth knowledge of container runtimes, and an understanding of integrating security into the software development lifecycle Experience performing secure code reviews and security approvals, including the use of static and dynamic application security testing (SAST / DAST) tools Experience in cryptography management and enhancements Relevant security certifications such as ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty or GCP Professional Cloud Security Engineer The main part of our tech stack is listed below. We don't ask that you have experience in all of it, but if you do, that's great! Java, which makes up the majority of our backend codebase GCP and AWS - we're cloud-native Microservice-based architecture Kubernetes (GKE on GCP, EKS on AWS) TeamCity for CI/CD (with multiple production releases per day) Terraform and Grafana RDS and CloudSQL for PostgreSQL Our Interview Process: Interviewing is a two-way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team: Initial interview with an Engineer - 45 minutes Take-home technical test, to be discussed in the next interview . click apply for full job details

Power BI Technical Architect Umbrella Rate: 1200 - 1,250 per day (Inside IR35) Location: Bristol 1-2 days every other week. Plus 1-2 days in London and/or Birmingham a month Clearance: Active MOD SC Clearance Required Nationality Requirement: Sole UK National The Opportunity We are seeking an experienced SC Cleared Power BI Technical Architect to lead the design, governance, and delivery of enterprise-scale reporting, analytics, and business intelligence solutions within a major public sector transformation programme. This is a client-facing role where you'll define the Power BI strategy, provide technical leadership across the Microsoft data platform, and ensure analytics solutions are secure, scalable, performant, and aligned to business objectives. Key Responsibilities Define and own the Power BI architecture, standards, and roadmap. Design end-to-end reporting and analytics solutions across the Microsoft data platform. Lead the design and governance of: Power BI Workspaces Semantic Models/Datasets Dataflows Dashboards and Reports Develop scalable dimensional data models and reporting frameworks. Integrate Power BI with enterprise data platforms including Azure SQL, Data Lake, Synapse, Fabric, and Oracle environments. Establish governance, security, audit, and reporting standards. Define and implement Row-Level Security (RLS), workspace controls, and access management. Provide technical leadership and architectural assurance throughout delivery. Mentor developers and analysts while promoting reusable patterns and best practices. Work closely with Data Engineering, Security, DevOps, Product, and Delivery teams. Essential Skills & Experience Proven experience as a Power BI Technical Architect , Solution Architect, or Senior Power BI Lead. Deep hands-on expertise with: Power BI DAX Power Query Semantic Models Dataflows Deployment Pipelines Power BI Administration Experience integrating Power BI with: Azure SQL Azure Data Lake Microsoft Fabric Azure Synapse Enterprise Data Platforms Strong dimensional data modelling experience. Experience designing secure and governed analytics solutions. Knowledge of data governance, lineage, metadata, and data quality principles. Experience implementing CI/CD and source control practices for Power BI solutions. Strong stakeholder management and communication skills. Experience delivering within large-scale public sector or enterprise transformation programmes. Desirable Skills Microsoft Fabric Azure Data Factory Databricks Azure DevOps SQL Server Oracle Cloud environments DevSecOps and Infrastructure as Code practices TOGAF, Azure Architecture, or Microsoft Power BI certifications What We're Looking For You'll be a technically strong architect who combines deep Power BI expertise with excellent stakeholder engagement skills. You'll be comfortable shaping enterprise reporting strategies, mentoring delivery teams, and driving governance and best practices across large-scale data and analytics programmes. If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.

Location: Bristol (mostly onsite) Duration: 6 month contract Rate: 110ph UMB (Inside IR35) Clearance: Active DV preferred Role details: Our client is seeking a Solutions Architect to support complex defence and security programmes in Bristol. This six-month contract offers the opportunity to provide technical leadership across secure, integrated solutions, with the role being predominantly onsite. Active DV clearance is preferred. Key Responsibilities: Act as the technical authority for solution design across large-scale and multi-project programmes Define and evolve architectures that balance customer needs, enterprise principles and secure-by-design standards Contribute to technology roadmaps, identifying opportunities for innovation and technology insertion Lead technical reviews, trade-off studies and risk assessments for major design decisions Mentor and coach Solutions Architects and Engineers, supporting capability development across the technical community Represent the organisation at senior customer forums, technical boards and industry events Support business-winning activities, including solution strategy, bids and proposal development Champion architectural best practice, reuse and model-based design approaches Job Requirements: Extensive technical expertise with a proven track record of designing secure, integrated solutions Significant experience in solution architecture across infrastructure, applications, data, networking and cloud Strong knowledge of enterprise and solution architecture frameworks, such as TOGAF, MODAF or NAF Advanced understanding of secure system design principles and cyber security standards Experience shaping architectures within Agile or SAFe delivery environments Experience working within UK secure environments and classified Ministry of Defence systems Strong communication skills, with the ability to influence technical strategy and engage senior stakeholders Ability to mentor, coach and provide thought leadership within a technical community Desirable Skills: Active DV clearance Relevant industry certifications, such as TOGAF, Architect or ArchiMate Experience contributing to technology roadmaps and enterprise strategy Familiarity with service design, operational transformation and digital modernisation Exposure to cloud-native, DevSecOps and automation approaches Experience presenting at technical boards, customer forums or industry conferences If you are an experienced Solutions Architect with expertise in secure systems and defence environments, apply now to support our client's high-profile technical programmes in Bristol.