5 jobs found

DevSecOps Consultant Sheffield (2-days per week onsite) Inside IR35 We're partnering with a leading financial services client to appoint a DevSecOps Consultant to drive secure engineering practices across large-scale, cloud-based platforms. This role is ideal for someone who has come from a hands-on DevSecOps Engineering background and has since transitioned into architecture, design and advisory, while still retaining strong technical depth. We're particularly looking for someone who brings a strong blend of Python development and orchestration experience alongside their DevSecOps expertise. Key Requirements: Proven background in hands-on DevSecOps Engineering, now operating in a design/architecture-focused role Strong Python development experience, with the ability to build automation and orchestration solutions Strong experience with orchestration and workflow automation across engineering, cloud and security platforms Strong experience across both AWS and GCP (essential) Deep understanding of CI/CD pipelines, build tools, artifact repositories, and developer platforms Expertise in secure software delivery, vulnerability management, and platform security Experience with threat modelling, security frameworks, and maturity assessments Strong knowledge of application security, network security, and cloud security principles Excellent stakeholder management and communication skills Desirable: Experience in financial services or regulated environments Knowledge of Kubernetes and container security Familiarity with supply chain security, SBOM, and secure development practices Experience with workflow/orchestration tooling and event-driven automation Relevant certifications (e.g. CISSP, CISM, CCSP) More details available on successful application.

Cloud Security Architect Salary: Up to 100,000 - 110,000 base + package + 5-10% Bonus Location: Hybrid (UK client sites, office and home-based) We're recruiting for an experienced Cloud Security Architect Consultant to join a leading cybersecurity consulting practice delivering secure cloud solutions across government and highly regulated environments. This is an exciting opportunity to work on complex cloud transformation programmes, helping clients design, secure and implement cloud environments across public, private and hybrid platforms. What you'll be doing You'll work closely with clients, architects and engineering teams to deliver secure cloud solutions, including: Designing secure cloud architectures for public, private and hybrid cloud environments Developing cloud security strategies and enterprise security use cases Creating security reference architectures and governance models Supporting the design and deployment of secure cloud infrastructure Embedding security throughout the cloud lifecycle using Secure by Design principles Conducting threat modelling and architecture reviews Working with cross-functional teams to integrate secure cloud solutions across hybrid IT environments Implementing security automation, orchestration and DevSecOps practices Providing technical guidance and mentoring to colleagues and clients What we're looking for We're interested in speaking with Cloud Security professionals who have experience in one or more of the following: Cloud security architecture and design Public cloud platforms including AWS, Azure and/or Google Cloud Platform (GCP) Secure cloud governance and operating models DevSecOps, Infrastructure as Code (IaC) and CI/CD security Zero Trust security principles Threat modelling and security architecture reviews Cloud networking, identity and access management, application and data security Security automation and orchestration Relevant cloud security certifications (AWS, Azure or Google Cloud) Security Requirements Due to the nature of the work, applicants must : Be a sole UK national Hold active SC (Security Check) clearance Have lived continuously in the UK for the last five years What's on offer Up to 100,000 - 110,000 base salary + 5-10% Bonus Hybrid working model Opportunity to work on high-profile, security-cleared programmes Exposure to enterprise-scale cloud transformation and security projects Excellent career development within a growing cybersecurity consulting practice If you're passionate about cloud security and want to work on technically challenging projects in secure environments, we'd love to hear from you.

Security Tester Contract (12 months+) SC Clearance Required (Active/Lapsed) Inside IR35 Location: Remote-first, UK Contract: Initial 12 months (potential to extend) Clearance: SC Clearance Required (Active/Lapsed) We are looking for an experienced Security Tester to support a major programme within a complex and highly regulated environment. The successful consultant will bring strong hands-on security testing experience, with the ability to identify vulnerabilities, assess security controls and work closely with technical teams to ensure applications and systems meet required security standards. You will work alongside engineering, development and wider testing teams, providing security testing expertise throughout the delivery lifecycle. Key Responsibilities Plan and execute security testing activities across applications, APIs and supporting systems. Identify, assess and document security vulnerabilities and risks. Perform hands-on security testing using appropriate manual and automated techniques. Test application and system security controls against defined requirements. Work closely with development and engineering teams to communicate findings and support remediation. Retest vulnerabilities and security issues following remediation. Produce clear security testing documentation and reports. Support security assurance activities throughout the delivery lifecycle. Work collaboratively with wider functional, integration and automation testing teams. Essential Experience Strong hands-on experience within Security Testing / Application Security Testing . Experience conducting security and vulnerability testing across enterprise applications. Strong understanding of common application security vulnerabilities and OWASP principles . Experience testing web applications and APIs . Experience using relevant security testing and vulnerability assessment tools. Ability to identify vulnerabilities, assess their potential impact and recommend remediation. Experience producing clear security testing reports and documentation. Experience working within complex enterprise environments. Strong stakeholder engagement and communication skills. Desirable Experience Experience working within defence, government or UK public-sector programmes . Experience within highly regulated or security-critical environments. Knowledge of secure software development and DevSecOps practices. Experience working alongside Agile engineering and testing teams. Relevant security testing certifications are advantageous but not essential .

AI DevSecOps Consultant Remote Inside IR35 We're partnering with a leading financial services client to appoint an AI DevSecOps Consultant to drive secure engineering practices across large-scale, cloud-based platforms. A key focus will be practical AI experience within DevSecOps, including embedding security controls into modern AI-assisted developer workflows. We're particularly interested in candidates who have worked with Claude Code or similar AI coding tools and understand how to securely integrate AI-generated code into enterprise development pipelines. Key Requirements: Proven background in hands-on DevSecOps Engineering, with experience operating in a design/architecture-focused role Strong practical experience applying AI within DevSecOps and software engineering workflows Experience securing AI-assisted development workflows, including Claude Code or similar tools Experience integrating SAST and other security controls into workflows containing AI-generated code Strong experience with secrets scanning and preventing sensitive information from entering source code or pipelines Strong experience designing and implementing secure CI/CD pipelines Strong Python development experience, with the ability to build automation and orchestration solutions Strong experience with orchestration and workflow automation across engineering, cloud and security platforms Strong experience across both AWS and GCP (essential) Deep understanding of CI/CD pipelines, build tools, artifact repositories and developer platforms Expertise in secure software delivery, vulnerability management and platform security Experience with threat modelling, security frameworks and maturity assessments Strong knowledge of application security, network security and cloud security principles More details available on successful application.

Job Title: Azure Engineer Job Description This role leads the design and delivery of cloud-native, full stack products on Microsoft Azure, running on Azure Kubernetes Service (AKS). You will be hands-on across the stack while setting technical direction, strengthening engineering standards, and ensuring solutions are secure, resilient, observable, and straightforward to operate in production. Responsibilities Lead full stack delivery across React (TypeScript) front-end applications and Java/Python back-end services, including microservices and APIs. Own cloud-native solution design for AKS-based platforms, defining service boundaries, resilience patterns, scaling approaches, deployment strategies, and operational readiness. Design, build, and operate back-end services using Java (Spring Boot) and/or Python (FastAPI/Flask), covering API design with OpenAPI, performance optimisation, and security controls. Develop modern user interfaces with React, focusing on accessible design, reusable components, and efficient state management. Design and maintain Kubernetes deployments on AKS, including manifests, ingress configuration, autoscaling, configuration and secrets management, service-to-service communication, and rollout/rollback patterns. Implement and maintain DevSecOps practices using Azure DevOps, building CI/CD pipelines with automated quality gates such as unit and integration tests, SAST/DAST where applicable, and dependency scanning. Drive observability and production excellence by implementing logging, metrics, and tracing, creating actionable alerts, defining SLOs and SLIs, and leading incident response and post-incident improvement activities. Embed security by design through secure coding practices, threat modelling, role-based access control and least privilege, secrets management including Key Vault integration, and modern identity patterns using OAuth2 and OIDC. Coach and uplift engineers across the stack by leading code and design reviews, mentoring, driving consistent standards, and actively reducing technical debt. Collaborate closely with product, architecture, UX, QA, and platform teams to plan delivery, manage risk, and ensure successful outcomes. Set clear technical direction, making well-reasoned trade-offs between speed and sustainability. Build an inclusive engineering culture where diverse viewpoints are welcomed and used to improve outcomes. Take accountability for delivery and production stability, focusing on root causes rather than temporary workarounds. Maintain delivery momentum by removing blockers, simplifying complex processes, automating where possible, and helping the team ship high-quality software. Essential Skills Significant experience in Senior Lead or Lead Engineer roles delivering and operating production systems. Strong hands-on engineering background in Java, including Spring Boot, REST APIs, testing strategies, and performance tuning. Strong hands-on experience with Python for service development and automation, preferably using FastAPI or Flask. Proven experience building and maintaining front-end applications with React, ideally using TypeScript, modern hooks, and robust front-end testing approaches. Demonstrable experience running workloads on Azure Kubernetes Service (AKS), with solid understanding of Kubernetes fundamentals such as deployments, services, ingress, configmaps, secrets, and horizontal pod autoscaling (HPA). Practical experience with containerisation using Docker and packaging and deployment of containerised workloads. experience designing and executing release strategies, including blue/green deployments, canary releases, rolling upgrades, and rollback planning. Strong experience with Azure DevOps, including CI/CD pipeline design and implementation for build, test, and deploy stages, approvals, and environment management. Good understanding of repository hygiene, branching strategies, and maintaining high-quality pull requests. Solid understanding of security, reliability, and operability in a regulated or enterprise environment. experience applying DevSecOps practices including SAST and DAST, and dependency scanning within CI/CD pipelines. Practical knowledge of modern identity and access management, including OAuth2 and OIDC. Additional Skills & Qualifications experience with Azure services commonly used alongside AKS, such as Azure Container Registry (ACR), Key Vault, Azure Monitor, Log Analytics, Application Insights, API Management (APIM), and Service Bus or Event Hubs. Familiarity with Infrastructure as Code tools, particularly Bicep or Terraform. Understanding of service mesh technologies and policy controls, as well as network security patterns including private endpoints and ingress controls. Strong background in domain-driven design and event-driven architecture. experience leading cross-functional engineering teams and influencing technical direction. Ability to balance short-term delivery needs with long-term sustainability and maintainability. Why Work Here? You will join a culture that values strong engineering practices, inclusive collaboration, and continuous improvement. The environment encourages ownership of technical decisions, supports mentoring and skills development, and recognises the importance of secure, reliable, and well-operated systems. You will have the opportunity to shape engineering standards, work with modern cloud-native technologies, and contribute to an environment where thoughtful trade-offs and sustainable delivery are genuinely appreciated. Work Environment You will work in a modern cloud-native environment built on Microsoft Azure and Azure Kubernetes Service, using technologies such as Java (Spring Boot), Python (FastAPI/Flask), React with TypeScript, Docker, and Azure DevOps for CI/CD. The role involves close collaboration with product, architecture, UX, QA, and platform teams in a setting that emphasises observability, security, and production excellence. The engineering culture promotes inclusive teamwork, high code quality, and automation across the delivery lifecycle. Location Sheffield, UK Rate/Salary .00 GBP Daily Trading as TEKsystems. Allegis Group Limited, Maxis 2, Western Road, Bracknell, RG12 1RT, United Kingdom. No. (phone number removed). Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands. If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at (url removed)> To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go to (url removed)> We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice at (url removed)/en-gb/privacy-notices for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. If you are resident in the UK, EEA or Switzerland, we will process any access request you make in accordance with our commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield.