Do you have a background in Application Security, DevSecOps or Product Security, with hands-on experience embedding application security into the SDLC If so, this could be an opportunity worth considering. Join a well-established health research organisation and charity supporting large-scale medical research. You will work closely with engineering, architecture and cloud teams to integrate security throughout the software development lifecycle. Microsoft Azure and KQL experience are essential, alongside relevant experience in CI/CD, Kubernetes, API security, security-as-code and security automation. This is a hands-on application security role focused on secure design, application security testing and supporting development teams to build secure applications. This is a full-time permanent role predominantly remote / hybrid in London offerings benefits and a salary of £80,000 which can be negotiable for right candidate. Please only apply if you have right to work in the UK as Visa sponsorship is not available. You will be responsible for: Working with engineering and architecture teams to promote secure development. Implementing and maintaining application security testing solutions. Integrating security controls into CI/CD pipelines. Strengthening the security of GitHub Actions and similar CI/CD platforms. Providing guidance on secure API design and externally accessible systems. Supporting Azure cloud infrastructure, including Azure Kubernetes Service (AKS). Developing security-as-code and policy-as-code. Supporting the security of cloud-hosted data platforms. Automating security processes through infrastructure-as-code and scripting. Maintaining technical and security documentation. Supporting development teams with security tooling and best practices. Contributing to threat modelling and compliance activities. Applications are welcomed from candidates with the required experience from backgrounds including: Application Security Engineer, DevSecOps Engineer, Product Security Engineer, Security Engineer - Application Security, Security Engineer - Product Security, DevOps Security Engineer, Application Security Consultant, Security Engineer - DevSecOps, Secure Software Engineer, Application Security Specialist, Application Security Architect What we are looking for: Hands-on experience embedding application security into the SDLC. Experience with Microsoft Azure security controls and cloud security governance. Experience with KQL. Experience securing APIs, internet-facing services, Kubernetes, preferably AKS, and containerised environments. Experience with SAST, DAST, IAST and SCA. Knowledge of security automation, security-/policy-as-code and secure engineering practices. Familiarity with GitHub and GitHub Actions. Experience with Terraform and Python. Understanding of cloud security governance. Experience with threat modelling in software engineering contexts. Knowledge of ISO 27001 and its relevance to secure engineering. Exposure to Agile working environments and DevSecOps practices Ideally experience securing data platforms such as Databricks, Dagster or Snowflake Eligible to work in the UK. What the role offers: £80,000 DOE, negotiable Predominantly remote / hybrid working London office Full-time permanent position Excellent benefits package This is an excellent opportunity for a Senior Application Security Engineer where you can make a meaningful impact on the safe and effective adoption of emerging technologies. Important Information: We endeavour to process your personal data in a fair and transparent manner. In applying for this role, Additional Resources will be acting in your best interest and may contact you in relation to the role, either by email, phone or text message. For more information see our Privacy Policy on our website. It is important you are aware of your individual rights and the provisions the company has put in place to protect your data. If you would like further information on the policy or GDPR please contact us. Additional Resources are an Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Businesses Regulations 2003.
01/11/2026
Full time
Do you have a background in Application Security, DevSecOps or Product Security, with hands-on experience embedding application security into the SDLC If so, this could be an opportunity worth considering. Join a well-established health research organisation and charity supporting large-scale medical research. You will work closely with engineering, architecture and cloud teams to integrate security throughout the software development lifecycle. Microsoft Azure and KQL experience are essential, alongside relevant experience in CI/CD, Kubernetes, API security, security-as-code and security automation. This is a hands-on application security role focused on secure design, application security testing and supporting development teams to build secure applications. This is a full-time permanent role predominantly remote / hybrid in London offerings benefits and a salary of £80,000 which can be negotiable for right candidate. Please only apply if you have right to work in the UK as Visa sponsorship is not available. You will be responsible for: Working with engineering and architecture teams to promote secure development. Implementing and maintaining application security testing solutions. Integrating security controls into CI/CD pipelines. Strengthening the security of GitHub Actions and similar CI/CD platforms. Providing guidance on secure API design and externally accessible systems. Supporting Azure cloud infrastructure, including Azure Kubernetes Service (AKS). Developing security-as-code and policy-as-code. Supporting the security of cloud-hosted data platforms. Automating security processes through infrastructure-as-code and scripting. Maintaining technical and security documentation. Supporting development teams with security tooling and best practices. Contributing to threat modelling and compliance activities. Applications are welcomed from candidates with the required experience from backgrounds including: Application Security Engineer, DevSecOps Engineer, Product Security Engineer, Security Engineer - Application Security, Security Engineer - Product Security, DevOps Security Engineer, Application Security Consultant, Security Engineer - DevSecOps, Secure Software Engineer, Application Security Specialist, Application Security Architect What we are looking for: Hands-on experience embedding application security into the SDLC. Experience with Microsoft Azure security controls and cloud security governance. Experience with KQL. Experience securing APIs, internet-facing services, Kubernetes, preferably AKS, and containerised environments. Experience with SAST, DAST, IAST and SCA. Knowledge of security automation, security-/policy-as-code and secure engineering practices. Familiarity with GitHub and GitHub Actions. Experience with Terraform and Python. Understanding of cloud security governance. Experience with threat modelling in software engineering contexts. Knowledge of ISO 27001 and its relevance to secure engineering. Exposure to Agile working environments and DevSecOps practices Ideally experience securing data platforms such as Databricks, Dagster or Snowflake Eligible to work in the UK. What the role offers: £80,000 DOE, negotiable Predominantly remote / hybrid working London office Full-time permanent position Excellent benefits package This is an excellent opportunity for a Senior Application Security Engineer where you can make a meaningful impact on the safe and effective adoption of emerging technologies. Important Information: We endeavour to process your personal data in a fair and transparent manner. In applying for this role, Additional Resources will be acting in your best interest and may contact you in relation to the role, either by email, phone or text message. For more information see our Privacy Policy on our website. It is important you are aware of your individual rights and the provisions the company has put in place to protect your data. If you would like further information on the policy or GDPR please contact us. Additional Resources are an Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Businesses Regulations 2003.
Azure Cloud Platform Engineer (Apply online only) per day (Umbrella/Inside IR35) Initial 6-month contract, with potential for extension Milton Keynes - Hybrid, 3 days on site per week SC Clearance Required Are you an Azure Cloud Engineer with experience building cloud platforms and migrating applications? Do you have hands-on Terraform or Bicep experience and a background working in secure environments? An opportunity is available to join a major digital transformation programme, delivering Azure cloud services as part of a three-year technology and cyber security strategy. You will work across cloud readiness, platform build and application migration, helping develop secure, scalable Azure environments. This is a hands-on role covering landing zones, infrastructure automation, CI/CD pipelines and ongoing platform support, alongside providing technical advice to project teams and stakeholders. The role: Design, build and maintain Azure landing zones, infrastructure and cloud services. Support application and infrastructure discovery, migration readiness assessments and migration into Azure. Develop Infrastructure as Code using Terraform or Bicep. Build and maintain CI/CD pipelines and DevSecOps toolchains. Configure Azure networking, identity and access, monitoring, security logging, backup and recovery. Support application modernisation using Azure PaaS, containers and serverless services. Troubleshoot complex technical issues and improve platform performance, reliability and cost efficiency. Ensure delivery meets relevant UK government security requirements and technical standards. The person: Proven experience building Azure platforms and migrating applications or services into public cloud. Hands-on experience with Terraform or Bicep and CI/CD pipelines. Strong understanding of Azure networking, identity, cloud security and Zero Trust principles. Experience working in secure environments, with knowledge of NCSC, GDS and relevant UK government security frameworks. Comfortable working in Agile teams and communicating with technical and non-technical stakeholders. Able to attend Milton Keynes three days per week. Experience with Azure Migrate, AKS, App Service, Functions, Logic Apps or Container Apps would be beneficial. Azure certifications such as AZ-104, AZ-305 or AZ-400 and knowledge of AWS are desirable. Rise Technical Recruitment Ltd acts an employment agency for permanent roles and an employment business for temporary roles. The salary advertised is the bracket available for this position. The actual salary paid will be dependent on your level of experience, qualifications and skill set and will be decided by our client, the employer. Rise are not responsible or liable for any hiring decisions made by the end client. We are an equal opportunities company and welcome applications from all suitable candidates.
02/11/2026
Contractor
Azure Cloud Platform Engineer (Apply online only) per day (Umbrella/Inside IR35) Initial 6-month contract, with potential for extension Milton Keynes - Hybrid, 3 days on site per week SC Clearance Required Are you an Azure Cloud Engineer with experience building cloud platforms and migrating applications? Do you have hands-on Terraform or Bicep experience and a background working in secure environments? An opportunity is available to join a major digital transformation programme, delivering Azure cloud services as part of a three-year technology and cyber security strategy. You will work across cloud readiness, platform build and application migration, helping develop secure, scalable Azure environments. This is a hands-on role covering landing zones, infrastructure automation, CI/CD pipelines and ongoing platform support, alongside providing technical advice to project teams and stakeholders. The role: Design, build and maintain Azure landing zones, infrastructure and cloud services. Support application and infrastructure discovery, migration readiness assessments and migration into Azure. Develop Infrastructure as Code using Terraform or Bicep. Build and maintain CI/CD pipelines and DevSecOps toolchains. Configure Azure networking, identity and access, monitoring, security logging, backup and recovery. Support application modernisation using Azure PaaS, containers and serverless services. Troubleshoot complex technical issues and improve platform performance, reliability and cost efficiency. Ensure delivery meets relevant UK government security requirements and technical standards. The person: Proven experience building Azure platforms and migrating applications or services into public cloud. Hands-on experience with Terraform or Bicep and CI/CD pipelines. Strong understanding of Azure networking, identity, cloud security and Zero Trust principles. Experience working in secure environments, with knowledge of NCSC, GDS and relevant UK government security frameworks. Comfortable working in Agile teams and communicating with technical and non-technical stakeholders. Able to attend Milton Keynes three days per week. Experience with Azure Migrate, AKS, App Service, Functions, Logic Apps or Container Apps would be beneficial. Azure certifications such as AZ-104, AZ-305 or AZ-400 and knowledge of AWS are desirable. Rise Technical Recruitment Ltd acts an employment agency for permanent roles and an employment business for temporary roles. The salary advertised is the bracket available for this position. The actual salary paid will be dependent on your level of experience, qualifications and skill set and will be decided by our client, the employer. Rise are not responsible or liable for any hiring decisions made by the end client. We are an equal opportunities company and welcome applications from all suitable candidates.
Security Operations Lead - SOC, Azure DevSecOps - UK Remote - BPSS (Baseline Personnel Security Standard) Lead Security Operations. Build Security Engineering. Protect a Global SaaS Platform. We are partnering with a technology organisation that operates a large-scale, cloud-native SaaS platform serving millions of users globally. Due to continued growth, they are seeking an experienced Security Engineering & SOC Lead to drive both security engineering and security operations across a modern Microsoft Azure estate. This is a rare opportunity for a hands-on cyber security professional who enjoys building security controls, improving SOC effectiveness, mentoring analysts, and leading incident response activities in a complex cloud environment. Approximately 60% of the role is focused on security engineering, with the remainder centred on SOC leadership, detection engineering, and incident response. You'll lead a team of three analysts whilst remaining technically hands-on as the senior escalation point for complex investigations and security challenges. The Role As Security Engineering & SOC Lead, you will be responsible for designing, implementing, and continuously improving the security controls, monitoring capabilities, and operational processes that protect a large Azure-based platform. Working closely with architecture, engineering, and development teams, you'll ensure security is embedded across infrastructure, applications, and delivery pipelines. Key Responsibilities Security Engineering Implement Azure security controls and platform guardrails. Deploy and manage Azure Policy, Defender for Cloud, Conditional Access, Privileged Identity Management (PIM), Key Vault, Managed Identities, Azure Firewall and WAF solutions. Deliver DevSecOps tooling across GitHub Actions and Azure Pipelines. Implement SAST, SCA, secrets scanning, container security and Infrastructure-as-Code scanning. Drive supply chain security initiatives including SBOM generation, artefact signing and policy enforcement. Harden AKS and cloud-native services through Infrastructure-as-Code and automated security controls. Work with engineering teams to remediate vulnerabilities, penetration test findings, and security risks. Support threat modelling, security reviews, and secure software development practices. Security Operations & Detection Engineering Lead day-to-day SOC operations. Own Microsoft Sentinel administration and optimisation. Develop and tune detection logic using KQL and MITRE ATT&CK methodologies. Lead incident response, investigation, containment and post-incident reviews. Build automated response workflows using Logic Apps and security playbooks. Conduct proactive threat hunting across platform telemetry. Manage security monitoring, logging standards and onboarding of new services into the SIEM. Produce dashboards, metrics and reporting on SOC performance and security posture. Team Leadership Lead, mentor and develop a team of three SOC Analysts. Conduct one-to-ones, objectives and development planning. Act as the team's technical escalation point. Develop analyst capabilities in threat hunting, detection engineering and advanced investigations. Maintain SOC documentation, runbooks and operational procedures. About You You will be a hands-on cyber security professional with a strong background in both security engineering and security operations. Essential Experience Experience leading or managing a SOC, Security Operations, Detection Engineering or Incident Response function. Strong hands-on Microsoft Sentinel experience. Advanced KQL skills and detection engineering expertise. Experience investigating and responding to security incidents within cloud environments. Strong knowledge of Azure security technologies, including: Entra ID Conditional Access PIM Defender for Cloud Azure Policy Key Vault Azure networking and segmentation Experience implementing DevSecOps tooling and security automation. Infrastructure-as-Code experience using Terraform and/or Bicep. Automation experience using PowerShell and/or Python. Knowledge of Kubernetes, AKS, container security and OWASP principles. Ability to communicate effectively with both technical and business stakeholders. Desirable Experience Multi-tenant SaaS platform environments. Microsoft Defender XDR suite. Building or transforming SOC functions. Threat hunting and purple team exercises. Supply chain security, SBOM, Sigstore, Cosign or SLSA frameworks. Policy as Code solutions such as OPA or Kyverno. Previous software engineering, platform engineering or infrastructure background. Certifications (Desirable) Certifications are advantageous but practical experience is valued above qualifications. Examples include: Microsoft SC-200 Microsoft AZ-500 Microsoft SC-300 CompTIA CySA+ GIAC GCDA, GCIA, GCIH or GCFA HashiCorp Terraform Associate CKA / CKS Why Apply? Opportunity to shape and mature a growing security capability. Hands-on technical leadership role. Modern Azure cloud and cloud-native environment. Significant influence across engineering, security and operations. High-profile platform supporting large-scale global users. Clear opportunity to mentor and develop an expanding security team. Security Clearance This role is subject to BPSS (Baseline Personnel Security Standard) screening and successful completion of the relevant checks will be required prior to employment. All our roles are UK based. When submitting your application to Colossus, please ensure the following Your CV has your address and postcode. You also have your correct phone number and email address so we can contact you asap regarding your application.
02/11/2026
Full time
Security Operations Lead - SOC, Azure DevSecOps - UK Remote - BPSS (Baseline Personnel Security Standard) Lead Security Operations. Build Security Engineering. Protect a Global SaaS Platform. We are partnering with a technology organisation that operates a large-scale, cloud-native SaaS platform serving millions of users globally. Due to continued growth, they are seeking an experienced Security Engineering & SOC Lead to drive both security engineering and security operations across a modern Microsoft Azure estate. This is a rare opportunity for a hands-on cyber security professional who enjoys building security controls, improving SOC effectiveness, mentoring analysts, and leading incident response activities in a complex cloud environment. Approximately 60% of the role is focused on security engineering, with the remainder centred on SOC leadership, detection engineering, and incident response. You'll lead a team of three analysts whilst remaining technically hands-on as the senior escalation point for complex investigations and security challenges. The Role As Security Engineering & SOC Lead, you will be responsible for designing, implementing, and continuously improving the security controls, monitoring capabilities, and operational processes that protect a large Azure-based platform. Working closely with architecture, engineering, and development teams, you'll ensure security is embedded across infrastructure, applications, and delivery pipelines. Key Responsibilities Security Engineering Implement Azure security controls and platform guardrails. Deploy and manage Azure Policy, Defender for Cloud, Conditional Access, Privileged Identity Management (PIM), Key Vault, Managed Identities, Azure Firewall and WAF solutions. Deliver DevSecOps tooling across GitHub Actions and Azure Pipelines. Implement SAST, SCA, secrets scanning, container security and Infrastructure-as-Code scanning. Drive supply chain security initiatives including SBOM generation, artefact signing and policy enforcement. Harden AKS and cloud-native services through Infrastructure-as-Code and automated security controls. Work with engineering teams to remediate vulnerabilities, penetration test findings, and security risks. Support threat modelling, security reviews, and secure software development practices. Security Operations & Detection Engineering Lead day-to-day SOC operations. Own Microsoft Sentinel administration and optimisation. Develop and tune detection logic using KQL and MITRE ATT&CK methodologies. Lead incident response, investigation, containment and post-incident reviews. Build automated response workflows using Logic Apps and security playbooks. Conduct proactive threat hunting across platform telemetry. Manage security monitoring, logging standards and onboarding of new services into the SIEM. Produce dashboards, metrics and reporting on SOC performance and security posture. Team Leadership Lead, mentor and develop a team of three SOC Analysts. Conduct one-to-ones, objectives and development planning. Act as the team's technical escalation point. Develop analyst capabilities in threat hunting, detection engineering and advanced investigations. Maintain SOC documentation, runbooks and operational procedures. About You You will be a hands-on cyber security professional with a strong background in both security engineering and security operations. Essential Experience Experience leading or managing a SOC, Security Operations, Detection Engineering or Incident Response function. Strong hands-on Microsoft Sentinel experience. Advanced KQL skills and detection engineering expertise. Experience investigating and responding to security incidents within cloud environments. Strong knowledge of Azure security technologies, including: Entra ID Conditional Access PIM Defender for Cloud Azure Policy Key Vault Azure networking and segmentation Experience implementing DevSecOps tooling and security automation. Infrastructure-as-Code experience using Terraform and/or Bicep. Automation experience using PowerShell and/or Python. Knowledge of Kubernetes, AKS, container security and OWASP principles. Ability to communicate effectively with both technical and business stakeholders. Desirable Experience Multi-tenant SaaS platform environments. Microsoft Defender XDR suite. Building or transforming SOC functions. Threat hunting and purple team exercises. Supply chain security, SBOM, Sigstore, Cosign or SLSA frameworks. Policy as Code solutions such as OPA or Kyverno. Previous software engineering, platform engineering or infrastructure background. Certifications (Desirable) Certifications are advantageous but practical experience is valued above qualifications. Examples include: Microsoft SC-200 Microsoft AZ-500 Microsoft SC-300 CompTIA CySA+ GIAC GCDA, GCIA, GCIH or GCFA HashiCorp Terraform Associate CKA / CKS Why Apply? Opportunity to shape and mature a growing security capability. Hands-on technical leadership role. Modern Azure cloud and cloud-native environment. Significant influence across engineering, security and operations. High-profile platform supporting large-scale global users. Clear opportunity to mentor and develop an expanding security team. Security Clearance This role is subject to BPSS (Baseline Personnel Security Standard) screening and successful completion of the relevant checks will be required prior to employment. All our roles are UK based. When submitting your application to Colossus, please ensure the following Your CV has your address and postcode. You also have your correct phone number and email address so we can contact you asap regarding your application.
Are you an experienced Solution Architect with a passion for designing complex, secure solutions for Defence and National Security customers? Sopra Steria's Aerospace, Defence and Security business is looking for Solution Architects to join our growing architecture community, supporting some of the UK's most important and highly secure programmes. You'll work closely with our customers, delivery teams and technology specialists to shape, design and lead the implementation of innovative solutions within complex and highly secure environments. We're particularly interested in architects who have a broad understanding across multiple technology and architecture domains as you will be working across business, application, data, infrastructure, security and service considerations, bringing these together into a coherent end-to-end solution. The role offers flexibility around location, although you will need to be comfortable travelling regularly to customer and Sopra Steria sites across the M3/M4 corridor as required. What you'll be doing: Owning the end-to-end solution architecture for complex Defence and National Security programmes, ensuring business, application, data, infrastructure, security and service requirements come together into a coherent and deliverable solution. Defining architecture and high-level designs that meet functional and non-functional requirements, considering integration, performance, usability, security, maintainability, affordability and alignment with customer technology strategies and roadmaps. Working closely with customers and senior stakeholders to understand their challenges, translate business requirements into technical solutions and provide trusted architectural guidance throughout the solution lifecycle. Providing technical leadership throughout delivery, working alongside engineering, infrastructure, cyber security, application, data and service specialists to ensure solutions are implemented in line with the agreed architecture and design principles. Supporting bids, pre-sales and growth opportunities, helping shape solution approaches, assess technical options, identify risks and communicate compelling architectures that address both existing and future customer requirements. Reviewing and assuring solutions and architectures, identifying technical risks, dependencies and opportunities for improvement while ensuring alignment with relevant standards, policies, architectural principles and secure-by-design approaches. What you'll bring: Solution Architecture experience with the ability to work across several architectural and technology domains, bringing together applications, data, infrastructure, security, integration and service considerations into end-to-end solutions. Experience designing and delivering complex solutions within Defence, MOD, UK Intelligence Community, National Security or similarly highly regulated and secure environments. Strong experience of owning solution designs from initial requirements and options analysis through to implementation, including architectures incorporating COTS products, existing services and new capabilities. A good understanding of modern technology and software delivery practices, including Agile delivery, DevSecOps, cloud technologies, integration patterns and contemporary application development approaches. Strong knowledge of architecture frameworks, standards and modelling approaches, such as TOGAF, ArchiMate, C4 or equivalent architecture methodologies. Strong customer and stakeholder engagement skills, with experience communicating complex technical concepts to technical and non-technical audiences and contributing to both delivery and pre-sales activities. It would be great if you had: Membership or professional registration with BCS, The Open Group or another relevant professional body. Experience applying Secure by Design principles, security architecture practices or designing solutions incorporating security-enforcing capabilities. Experience mentoring other architects, contributing to architecture communities of practice, or helping develop architectural standards, roadmaps and reusable approaches. eDV or MoD DV Security Clearance. If you are interested in this role but not sure if your skills and experience are exactly what we're looking for, please do apply, we'd love to hear from you! Employment Type: Permanent Location: This role will require regular travel to customer and Sopra Steria sites across the M3/M4 corridor, depending on project and customer requirements. Security Clearance Level: Holding an active SC and willingness to go through MoD DV Internal Recruiter: Josh Salary: Competitive, based on experience Benefits: £5,400 car allowance, which can also be taken as cash. Benefits include 25 days' holiday, with the option to purchase up to an additional 10 days per year, AXA medical insurance, 6% pension contribution and life assurance at 4x salary. If you're interested and need to work flexibly, we encourage you to apply and talk to us about what might be possible. Loved reading about this job and want to know more about us? Sopra Steria's Aerospace, Defence and Security business designs, develops and deploys digital solutions to Central Government clients. The work we do makes a real difference to the client's goal of National Security, and we operate in a unique and privileged environment. We are given time for professional development activities, and we coach and mentor our colleagues, sharing knowledge and learning from each other. We foster a culture in which employees feel valued and supported and have pride in their work for the customer, delivering outstanding rates of customer satisfaction in the UK's most complex safety- and security-critical markets. We embrace difference as a source of creativity, innovation and competitive advantage and are striving to become a more diverse organisation. We welcome applications from people with a diverse variety of backgrounds and identities. We are committed to equality of opportunity for all and do not discriminate on the basis of race, religion, colour, gender, age, disability, sexual orientation or marital status. We havepartnered with Vercida , the UK's largest diversity and inclusion focused careers site, where all our vacancies are available in an accessible format. If you require any adjustments to the recruitment process, to enable you to perform to the best of your ability, please let us knowwhen completingyour application. We participate in the Disability Confident scheme and are committed to offering an interview to any candidate with a disability, who meets the minimum criteria for the role. If you believe this could apply to you, please let us know when completing your application.
02/11/2026
Full time
Are you an experienced Solution Architect with a passion for designing complex, secure solutions for Defence and National Security customers? Sopra Steria's Aerospace, Defence and Security business is looking for Solution Architects to join our growing architecture community, supporting some of the UK's most important and highly secure programmes. You'll work closely with our customers, delivery teams and technology specialists to shape, design and lead the implementation of innovative solutions within complex and highly secure environments. We're particularly interested in architects who have a broad understanding across multiple technology and architecture domains as you will be working across business, application, data, infrastructure, security and service considerations, bringing these together into a coherent end-to-end solution. The role offers flexibility around location, although you will need to be comfortable travelling regularly to customer and Sopra Steria sites across the M3/M4 corridor as required. What you'll be doing: Owning the end-to-end solution architecture for complex Defence and National Security programmes, ensuring business, application, data, infrastructure, security and service requirements come together into a coherent and deliverable solution. Defining architecture and high-level designs that meet functional and non-functional requirements, considering integration, performance, usability, security, maintainability, affordability and alignment with customer technology strategies and roadmaps. Working closely with customers and senior stakeholders to understand their challenges, translate business requirements into technical solutions and provide trusted architectural guidance throughout the solution lifecycle. Providing technical leadership throughout delivery, working alongside engineering, infrastructure, cyber security, application, data and service specialists to ensure solutions are implemented in line with the agreed architecture and design principles. Supporting bids, pre-sales and growth opportunities, helping shape solution approaches, assess technical options, identify risks and communicate compelling architectures that address both existing and future customer requirements. Reviewing and assuring solutions and architectures, identifying technical risks, dependencies and opportunities for improvement while ensuring alignment with relevant standards, policies, architectural principles and secure-by-design approaches. What you'll bring: Solution Architecture experience with the ability to work across several architectural and technology domains, bringing together applications, data, infrastructure, security, integration and service considerations into end-to-end solutions. Experience designing and delivering complex solutions within Defence, MOD, UK Intelligence Community, National Security or similarly highly regulated and secure environments. Strong experience of owning solution designs from initial requirements and options analysis through to implementation, including architectures incorporating COTS products, existing services and new capabilities. A good understanding of modern technology and software delivery practices, including Agile delivery, DevSecOps, cloud technologies, integration patterns and contemporary application development approaches. Strong knowledge of architecture frameworks, standards and modelling approaches, such as TOGAF, ArchiMate, C4 or equivalent architecture methodologies. Strong customer and stakeholder engagement skills, with experience communicating complex technical concepts to technical and non-technical audiences and contributing to both delivery and pre-sales activities. It would be great if you had: Membership or professional registration with BCS, The Open Group or another relevant professional body. Experience applying Secure by Design principles, security architecture practices or designing solutions incorporating security-enforcing capabilities. Experience mentoring other architects, contributing to architecture communities of practice, or helping develop architectural standards, roadmaps and reusable approaches. eDV or MoD DV Security Clearance. If you are interested in this role but not sure if your skills and experience are exactly what we're looking for, please do apply, we'd love to hear from you! Employment Type: Permanent Location: This role will require regular travel to customer and Sopra Steria sites across the M3/M4 corridor, depending on project and customer requirements. Security Clearance Level: Holding an active SC and willingness to go through MoD DV Internal Recruiter: Josh Salary: Competitive, based on experience Benefits: £5,400 car allowance, which can also be taken as cash. Benefits include 25 days' holiday, with the option to purchase up to an additional 10 days per year, AXA medical insurance, 6% pension contribution and life assurance at 4x salary. If you're interested and need to work flexibly, we encourage you to apply and talk to us about what might be possible. Loved reading about this job and want to know more about us? Sopra Steria's Aerospace, Defence and Security business designs, develops and deploys digital solutions to Central Government clients. The work we do makes a real difference to the client's goal of National Security, and we operate in a unique and privileged environment. We are given time for professional development activities, and we coach and mentor our colleagues, sharing knowledge and learning from each other. We foster a culture in which employees feel valued and supported and have pride in their work for the customer, delivering outstanding rates of customer satisfaction in the UK's most complex safety- and security-critical markets. We embrace difference as a source of creativity, innovation and competitive advantage and are striving to become a more diverse organisation. We welcome applications from people with a diverse variety of backgrounds and identities. We are committed to equality of opportunity for all and do not discriminate on the basis of race, religion, colour, gender, age, disability, sexual orientation or marital status. We havepartnered with Vercida , the UK's largest diversity and inclusion focused careers site, where all our vacancies are available in an accessible format. If you require any adjustments to the recruitment process, to enable you to perform to the best of your ability, please let us knowwhen completingyour application. We participate in the Disability Confident scheme and are committed to offering an interview to any candidate with a disability, who meets the minimum criteria for the role. If you believe this could apply to you, please let us know when completing your application.
Platform Engineer Lead (AI Enablement) London / WFH to £130k+ Are you a technologist Platform Engineer with a strong knowledge of AI? You could be progressing your career in a hands-on Platform Engineer Lead role at a hugely successful and scaling FinTech. As the Platform Engineer Lead you'll champion a culture of continuous improvement, providing mentorship and constructive feedback to support the development of engineers while driving team performance, accountability and engagement. You'll identify and remove bottlenecks, optimise resources and ensure consistent delivery, fostering open and transparent communication across remote, hybrid and office based teams. Remaining hands-on in Cloud and Platform Engineering, you'll lead by example technically, defining and embedding engineering best practices that promote consistency, scalability and operational excellence across the organisation. You'll also drive the adoption of AI across the team, exploring opportunities to leverage AI in day-to-day operations as well as larger scale engineering initiatives. Collaborating with Product Managers, Engineering Managers and QA teams, you'll align technical strategy with business objectives, contribute to product decisions and ensure platform considerations balance speed of delivery, quality and scalability. You'll proactively identify and mitigate technical risks, while embedding DevSecOps principles to ensure security, monitoring, compliance and automation are integral to the platform from the outset. Location / WFH: There's a hybrid work from home policy with three days a week in the dog friendly, London office, where you can enjoy a diverse, sociable team atmosphere with roof top terrace and bar. About you: You have experience of managing Cloud / Platform engineering teams You're comfortable leading cross functional teams, working with engineering teams, QA and other stakeholders You have strong communication skills and can bridge the gap between technical and non-technical audiences You have a deep understanding of modern cloud / platform engineering practices and scalable system architectures You have experience driving a culture based on reliability, performance and continuous improvement You have strong cloud experience, Azure preferred but GCP or AWS also fine You have experience working and scaling a platform to support a fast paced containerised environment What's in it for you: As a Platform Engineer Lead you will earn a competitive package including: Salary to £130k Bonus (c20%) 28 days holiday (plus Bank Holidays) £1k learning and development budget Private Health Care, Travel Insurance, Mental Health sessions, Wellbeing allowance Annual anniversary awards (including 4 week paid sabbatical in year 4) Perks such as cycle to work scheme, travel loan, office dogs and free breakfast Apply now to find out more about this Platform Engineer Lead (AI Enablement) opportunity.
02/11/2026
Full time
Platform Engineer Lead (AI Enablement) London / WFH to £130k+ Are you a technologist Platform Engineer with a strong knowledge of AI? You could be progressing your career in a hands-on Platform Engineer Lead role at a hugely successful and scaling FinTech. As the Platform Engineer Lead you'll champion a culture of continuous improvement, providing mentorship and constructive feedback to support the development of engineers while driving team performance, accountability and engagement. You'll identify and remove bottlenecks, optimise resources and ensure consistent delivery, fostering open and transparent communication across remote, hybrid and office based teams. Remaining hands-on in Cloud and Platform Engineering, you'll lead by example technically, defining and embedding engineering best practices that promote consistency, scalability and operational excellence across the organisation. You'll also drive the adoption of AI across the team, exploring opportunities to leverage AI in day-to-day operations as well as larger scale engineering initiatives. Collaborating with Product Managers, Engineering Managers and QA teams, you'll align technical strategy with business objectives, contribute to product decisions and ensure platform considerations balance speed of delivery, quality and scalability. You'll proactively identify and mitigate technical risks, while embedding DevSecOps principles to ensure security, monitoring, compliance and automation are integral to the platform from the outset. Location / WFH: There's a hybrid work from home policy with three days a week in the dog friendly, London office, where you can enjoy a diverse, sociable team atmosphere with roof top terrace and bar. About you: You have experience of managing Cloud / Platform engineering teams You're comfortable leading cross functional teams, working with engineering teams, QA and other stakeholders You have strong communication skills and can bridge the gap between technical and non-technical audiences You have a deep understanding of modern cloud / platform engineering practices and scalable system architectures You have experience driving a culture based on reliability, performance and continuous improvement You have strong cloud experience, Azure preferred but GCP or AWS also fine You have experience working and scaling a platform to support a fast paced containerised environment What's in it for you: As a Platform Engineer Lead you will earn a competitive package including: Salary to £130k Bonus (c20%) 28 days holiday (plus Bank Holidays) £1k learning and development budget Private Health Care, Travel Insurance, Mental Health sessions, Wellbeing allowance Annual anniversary awards (including 4 week paid sabbatical in year 4) Perks such as cycle to work scheme, travel loan, office dogs and free breakfast Apply now to find out more about this Platform Engineer Lead (AI Enablement) opportunity.
Application Security Engineer Up to 75,000 Warwick (1-2 days per month) Embed security into modern software development. We're partnering with a leading UK infrastructure organisation to recruit an Application Security Engineer. This role focuses on ensuring security is embedded throughout the software development lifecycle, helping engineering teams identify and address risks before applications reach production. You'll work closely with developers and technical stakeholders to promote secure-by-design principles and strengthen application security practices across a growing technology estate. What you'll be doing Embedding security into the software development lifecycle Partnering with engineering teams to improve secure coding practices Conducting application security assessments and reviews Supporting DevSecOps initiatives across development teams Identifying vulnerabilities before release and supporting remediation Improving security processes within CI/CD pipelines Driving application security best practice across the organisation What we're looking for Software engineering background Around 5 years' experience in Application Security, DevSecOps or related positions Experience securing SaaS applications Strong understanding of application security principles Experience working closely with development teams Knowledge of secure coding and vulnerability management Ability to influence stakeholders and drive security improvements
02/11/2026
Full time
Application Security Engineer Up to 75,000 Warwick (1-2 days per month) Embed security into modern software development. We're partnering with a leading UK infrastructure organisation to recruit an Application Security Engineer. This role focuses on ensuring security is embedded throughout the software development lifecycle, helping engineering teams identify and address risks before applications reach production. You'll work closely with developers and technical stakeholders to promote secure-by-design principles and strengthen application security practices across a growing technology estate. What you'll be doing Embedding security into the software development lifecycle Partnering with engineering teams to improve secure coding practices Conducting application security assessments and reviews Supporting DevSecOps initiatives across development teams Identifying vulnerabilities before release and supporting remediation Improving security processes within CI/CD pipelines Driving application security best practice across the organisation What we're looking for Software engineering background Around 5 years' experience in Application Security, DevSecOps or related positions Experience securing SaaS applications Strong understanding of application security principles Experience working closely with development teams Knowledge of secure coding and vulnerability management Ability to influence stakeholders and drive security improvements
At Engine by Starling we are on a mission to find and work with leading banks all around the world who have the ambition to build rapid growth businesses, on our technology. Engine is Starling's software-as-a-service (SaaS) business, the technology that was built to power Starling Bank, and a year ago we split out as a separate business. Starling has seen exceptional growth and success, and a large part of that is down to the fact that we have built our own modern technology from the ground up. The Engine technology platform is now available to banks and financial institutions all around the world, enabling them to benefit from the innovative digital features, and efficient back-office processes that has helped achieve Starling's success. Our technologists are at the very heart of Engine and enjoy working in a fast-paced environment that is all about building things, creating new stuff, and disruptive technology that keeps us on the cutting edge of fintech. We operate a flat structure to empower you to make decisions regardless of what your primary responsibilities may be, innovation and collaboration will be at the core of everything you do. Help is never far away in our open culture, you will find support in your team and from across the business, we are in this together! The way to thrive and shine within Engine is to be a self-driven individual and be able to take full ownership of everything around you: From building things, designing, and discovering to sharing knowledge with your colleagues and making sure all processes are efficient and productive to deliver the best possible results for our customers. Our purpose is underpinned by five values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness. Hybrid Working We have a Hybrid approach to working here at Engine - our preference is that you're located within a commutable distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling - As a Security Engineer at Engine, you'll be working on helping to keep our infrastructure secure and compliant and our staff safe and productive. You'll be working on projects covering identity and access management, cloud and network security, vulnerability management, security monitoring, security hardening, compliance reviews, and more. It's a very varied role with lots of close interaction with the infrastructure, security engineering, cross-cutting and compliance teams. We are looking for an experienced Senior level GCP Security Engineer to join our established Security Engineering team, working closely with Information Security, Infrastructure and the various Engine Technology teams to make sure security is at the heart of all our technical processes. As our subject matter expert, you will take ownership of engineering the security foundations of our Google Cloud Platform environment. This is a hands-on role for a specialist with a proven track record of designing, building, and automating security controls specifically for GCP, including hardened GKE clusters. Engine by Starling engineers are excited about helping us deliver new features, regardless of what their primary tech stack may be. Hear from the team in our latest Blog or our case studies with Women in Tech. As a GCP Security Engineer, you will: Collaborate with stakeholders to define our Google Cloud security architecture (cloud identity, runtime security, security posture) Design, document, build and maintain a secure and scalable infrastructure on GCP using Infrastructure as Code Be part of the team responsible for safeguarding our systems, applications and data by ensuring secure user access, authentication and authorisation mechanisms are in place Engineer and automate technical controls within GCP to ensure and demonstrate continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actions Lead incident response efforts, including investigation and remediation of security breaches Support our internal security awareness and training programs, advocating the DevSecOps mindset that we have created across our technology teams Requirements We're open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. If you have an innate passion for security and care enough to find elegant solutions to difficult problems, we'd love to hear from you. What skills are essential: Mature understanding of cloud security architecture, with deep expertise in GCP and a proven track record Experience creating a GCP landing zone, configuring services such as organisation policies and VPC Service Controls A deep understanding of GCP IAM and its limitations Experience with service-oriented architecture using containers, distributed systems and immutable infrastructure on GCP (including GKE, Compute Engine, Shared VPC and Cloud SQL) Expertise in Kubernetes, securing clusters (GKE) and meshes (Cilium is preferable), networking best practices and RBAC implementation (CKA, CKS qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management on GCP - Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager - including cryptographic key ceremonies Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI/CD Experience configuring and utilising cloud-native security logging, monitoring and detection services Strong programming skills - in security we write our own scripts for automation in Python, Go and other languages while contributing to open-source tools so we can utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications The ability to document security requirements from various stakeholders Excellent problem-solving, communication and active listening skills with an innate passion for security The ability to identify security gaps and create solutions to minimise risk and impact to us A proactive approach to staying updated with the latest security threats, vulnerabilities and mitigation techniques Thorough understanding of the incident response process (preparation, identification, containment, eradication, recovery, lessons learned) What skills are desirable: In-depth knowledge of network security, including core routing and switching concepts (TCP/IP, BGP, VPNs), security controls (firewalls, WAFs, IDS/IPS), and practical experience designing hybrid connectivity between GCP and on-premise environments Experience with data-residency and regulated-workload controls such as Assured Workloads and Access Transparency, relevant to deploying per-market for different banks' regulators Hands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2, ISO 27001 and PCI DSS / 3DS Container security knowledge including container image provenance (e.g. Sigstore, Notary) with an in-depth knowledge of container runtimes, and an understanding of integrating security into the software development lifecycle Experience performing secure code reviews and security approvals, including the use of static and dynamic application security testing (SAST / DAST) tools Experience in cryptography management and enhancements Relevant security certifications such as ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty or GCP Professional Cloud Security Engineer The main part of our tech stack is listed below. We don't ask that you have experience in all of it, but if you do, that's great! Java, which makes up the majority of our backend codebase GCP and AWS - we're cloud-native Microservice-based architecture Kubernetes (GKE on GCP, EKS on AWS) TeamCity for CI/CD (with multiple production releases per day) Terraform and Grafana RDS and CloudSQL for PostgreSQL Our Interview Process: Interviewing is a two-way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team: Initial interview with an Engineer - 45 minutes Take-home technical test, to be discussed in the next interview . click apply for full job details
02/11/2026
Full time
At Engine by Starling we are on a mission to find and work with leading banks all around the world who have the ambition to build rapid growth businesses, on our technology. Engine is Starling's software-as-a-service (SaaS) business, the technology that was built to power Starling Bank, and a year ago we split out as a separate business. Starling has seen exceptional growth and success, and a large part of that is down to the fact that we have built our own modern technology from the ground up. The Engine technology platform is now available to banks and financial institutions all around the world, enabling them to benefit from the innovative digital features, and efficient back-office processes that has helped achieve Starling's success. Our technologists are at the very heart of Engine and enjoy working in a fast-paced environment that is all about building things, creating new stuff, and disruptive technology that keeps us on the cutting edge of fintech. We operate a flat structure to empower you to make decisions regardless of what your primary responsibilities may be, innovation and collaboration will be at the core of everything you do. Help is never far away in our open culture, you will find support in your team and from across the business, we are in this together! The way to thrive and shine within Engine is to be a self-driven individual and be able to take full ownership of everything around you: From building things, designing, and discovering to sharing knowledge with your colleagues and making sure all processes are efficient and productive to deliver the best possible results for our customers. Our purpose is underpinned by five values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness. Hybrid Working We have a Hybrid approach to working here at Engine - our preference is that you're located within a commutable distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling - As a Security Engineer at Engine, you'll be working on helping to keep our infrastructure secure and compliant and our staff safe and productive. You'll be working on projects covering identity and access management, cloud and network security, vulnerability management, security monitoring, security hardening, compliance reviews, and more. It's a very varied role with lots of close interaction with the infrastructure, security engineering, cross-cutting and compliance teams. We are looking for an experienced Senior level GCP Security Engineer to join our established Security Engineering team, working closely with Information Security, Infrastructure and the various Engine Technology teams to make sure security is at the heart of all our technical processes. As our subject matter expert, you will take ownership of engineering the security foundations of our Google Cloud Platform environment. This is a hands-on role for a specialist with a proven track record of designing, building, and automating security controls specifically for GCP, including hardened GKE clusters. Engine by Starling engineers are excited about helping us deliver new features, regardless of what their primary tech stack may be. Hear from the team in our latest Blog or our case studies with Women in Tech. As a GCP Security Engineer, you will: Collaborate with stakeholders to define our Google Cloud security architecture (cloud identity, runtime security, security posture) Design, document, build and maintain a secure and scalable infrastructure on GCP using Infrastructure as Code Be part of the team responsible for safeguarding our systems, applications and data by ensuring secure user access, authentication and authorisation mechanisms are in place Engineer and automate technical controls within GCP to ensure and demonstrate continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actions Lead incident response efforts, including investigation and remediation of security breaches Support our internal security awareness and training programs, advocating the DevSecOps mindset that we have created across our technology teams Requirements We're open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. If you have an innate passion for security and care enough to find elegant solutions to difficult problems, we'd love to hear from you. What skills are essential: Mature understanding of cloud security architecture, with deep expertise in GCP and a proven track record Experience creating a GCP landing zone, configuring services such as organisation policies and VPC Service Controls A deep understanding of GCP IAM and its limitations Experience with service-oriented architecture using containers, distributed systems and immutable infrastructure on GCP (including GKE, Compute Engine, Shared VPC and Cloud SQL) Expertise in Kubernetes, securing clusters (GKE) and meshes (Cilium is preferable), networking best practices and RBAC implementation (CKA, CKS qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management on GCP - Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager - including cryptographic key ceremonies Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI/CD Experience configuring and utilising cloud-native security logging, monitoring and detection services Strong programming skills - in security we write our own scripts for automation in Python, Go and other languages while contributing to open-source tools so we can utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications The ability to document security requirements from various stakeholders Excellent problem-solving, communication and active listening skills with an innate passion for security The ability to identify security gaps and create solutions to minimise risk and impact to us A proactive approach to staying updated with the latest security threats, vulnerabilities and mitigation techniques Thorough understanding of the incident response process (preparation, identification, containment, eradication, recovery, lessons learned) What skills are desirable: In-depth knowledge of network security, including core routing and switching concepts (TCP/IP, BGP, VPNs), security controls (firewalls, WAFs, IDS/IPS), and practical experience designing hybrid connectivity between GCP and on-premise environments Experience with data-residency and regulated-workload controls such as Assured Workloads and Access Transparency, relevant to deploying per-market for different banks' regulators Hands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2, ISO 27001 and PCI DSS / 3DS Container security knowledge including container image provenance (e.g. Sigstore, Notary) with an in-depth knowledge of container runtimes, and an understanding of integrating security into the software development lifecycle Experience performing secure code reviews and security approvals, including the use of static and dynamic application security testing (SAST / DAST) tools Experience in cryptography management and enhancements Relevant security certifications such as ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty or GCP Professional Cloud Security Engineer The main part of our tech stack is listed below. We don't ask that you have experience in all of it, but if you do, that's great! Java, which makes up the majority of our backend codebase GCP and AWS - we're cloud-native Microservice-based architecture Kubernetes (GKE on GCP, EKS on AWS) TeamCity for CI/CD (with multiple production releases per day) Terraform and Grafana RDS and CloudSQL for PostgreSQL Our Interview Process: Interviewing is a two-way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team: Initial interview with an Engineer - 45 minutes Take-home technical test, to be discussed in the next interview . click apply for full job details
We are recruiting for a Java Developer on contract to work for a leading Space organisation. The role can be based in either their Newcastle or Guildford offices 3 days per week and remote for 2 days. We require experienced software engineers who have had real world experience of Kubernetes, DevSecOps and the latest Java frameworks. Ideally you will come from a Defence or Space background. Skills such as testing, deployment, configuration are essential for this role. The Software Engineer will join our collaborative, forward-thinking Agile Scrum team, working on innovative Geospatial software, using the latest cloud-based technologies. The engineer will be involved in every stage of the software development life cycle, from initial design through development, testing, and deployment, delivering robust, scalable cloud-based services. Responsibilities Develop high-quality, readable, scalable and easily maintained code, using Java and related technologies, meeting requirements and coding standards. Develop reusable patterns and encourage innovation that will enhance team velocity. Contribute to quality assurance by writing unit and automated tests. Conduct design and code reviews to ensure code developed meets coding best practices guidelines, unit testing, security, and scalability and maintainability guidelines Ensure code is sufficiently documented and share knowledge of solutions implemented. Participate in sprint planning, reviews, and daily stand-ups in a true Agile environment, contributing to agile based estimating. Work with the scrum team to meet the sprint commitments Skill Set Essential Java Cloud Services development Unit testing Desirable DevSecOps awareness using tools such as Tekton, ArgoCD, SonarQube Red Hat Openshift container platform or Kubernetes Front End development using Angular
02/11/2026
Contractor
We are recruiting for a Java Developer on contract to work for a leading Space organisation. The role can be based in either their Newcastle or Guildford offices 3 days per week and remote for 2 days. We require experienced software engineers who have had real world experience of Kubernetes, DevSecOps and the latest Java frameworks. Ideally you will come from a Defence or Space background. Skills such as testing, deployment, configuration are essential for this role. The Software Engineer will join our collaborative, forward-thinking Agile Scrum team, working on innovative Geospatial software, using the latest cloud-based technologies. The engineer will be involved in every stage of the software development life cycle, from initial design through development, testing, and deployment, delivering robust, scalable cloud-based services. Responsibilities Develop high-quality, readable, scalable and easily maintained code, using Java and related technologies, meeting requirements and coding standards. Develop reusable patterns and encourage innovation that will enhance team velocity. Contribute to quality assurance by writing unit and automated tests. Conduct design and code reviews to ensure code developed meets coding best practices guidelines, unit testing, security, and scalability and maintainability guidelines Ensure code is sufficiently documented and share knowledge of solutions implemented. Participate in sprint planning, reviews, and daily stand-ups in a true Agile environment, contributing to agile based estimating. Work with the scrum team to meet the sprint commitments Skill Set Essential Java Cloud Services development Unit testing Desirable DevSecOps awareness using tools such as Tekton, ArgoCD, SonarQube Red Hat Openshift container platform or Kubernetes Front End development using Angular
CBSbutler Holdings Limited trading as CBSbutler
Stoke Gifford, Gloucestershire
Senior Solutions Architect - MOD DV Cleared Location: Bristol - Hybrid Contract: 12-month rolling contract Rate: 100- 107 per hour IR35: Inside IR35 Clearance: UK MOD DV Clearance required We're looking for an experienced Senior Solutions Architect to join a major defence programme in Bristol. This is a high-profile opportunity to take technical ownership across large-scale, complex programmes, working with senior stakeholders and shaping secure, integrated solutions within a highly regulated environment. You'll act as a technical authority , influencing architecture decisions, supporting strategic roadmaps and helping drive innovation across the organisation. The Role As a Senior Solutions Architect, you will: Act as the technical authority for solution design across large-scale and multi-project programmes. Define and evolve architectures that balance customer requirements, enterprise principles and secure-by-design standards. Shape divisional and line-of-business technology roadmaps, identifying opportunities for innovation and technology insertion. Lead technical reviews, trade-off studies and risk assessments for major architectural decisions. Work closely with senior technical and business stakeholders to influence strategy and delivery. Mentor and coach Solutions Architects and Engineers, helping raise capability across the wider architecture community. Represent the organisation at senior customer forums, technical boards and industry events. Support business-winning activity, including solution strategy, bids and proposal development. Champion architectural best practice, reuse and model-based design approaches. What We're Looking For You'll bring extensive technical expertise and a proven track record of designing secure, integrated solutions across complex environments. We're particularly interested in candidates who can: Operate as a recognised technical authority within their domain. Influence technical strategy and make complex architectural decisions. Communicate confidently with senior technical, customer and business stakeholders. Provide mentoring, coaching and thought leadership within an architecture community. Essential Skills & Experience Proven experience in Solution Architecture across multiple technical domains , including infrastructure, applications, data, networking and cloud. Strong knowledge of enterprise and solution architecture frameworks , such as TOGAF, MODAF and/or NAF. Advanced understanding of secure system design principles and cyber security standards . Experience designing and shaping architectures within Agile and/or SAFe delivery environments . Experience working within UK secure environments and classified MOD systems . Ability to mentor, coach and provide technical thought leadership across an architecture or engineering community. Current UK MOD DV clearance . Desirable Experience Industry certifications such as TOGAF, ArchiMate or recognised architecture qualifications . Experience contributing to technology roadmaps and enterprise-level strategy. Knowledge of service design, operational transformation and digital modernisation. Exposure to cloud-native, DevSecOps and automation approaches. Experience presenting at technical boards, customer forums or industry conferences. Why Consider This Opportunity? This is an opportunity to work at a senior level on complex, security-critical defence programmes , where your architectural expertise will directly influence technical strategy and delivery. You'll have the opportunity to work alongside experienced engineering and architecture teams, influence major design decisions and contribute to the development of future technology capabilities. This isn't an exhaustive list. If you have strong Solutions Architecture experience and a positive, collaborative attitude, we'd still be keen to hear from you even if you don't tick every desirable box.
01/11/2026
Contractor
Senior Solutions Architect - MOD DV Cleared Location: Bristol - Hybrid Contract: 12-month rolling contract Rate: 100- 107 per hour IR35: Inside IR35 Clearance: UK MOD DV Clearance required We're looking for an experienced Senior Solutions Architect to join a major defence programme in Bristol. This is a high-profile opportunity to take technical ownership across large-scale, complex programmes, working with senior stakeholders and shaping secure, integrated solutions within a highly regulated environment. You'll act as a technical authority , influencing architecture decisions, supporting strategic roadmaps and helping drive innovation across the organisation. The Role As a Senior Solutions Architect, you will: Act as the technical authority for solution design across large-scale and multi-project programmes. Define and evolve architectures that balance customer requirements, enterprise principles and secure-by-design standards. Shape divisional and line-of-business technology roadmaps, identifying opportunities for innovation and technology insertion. Lead technical reviews, trade-off studies and risk assessments for major architectural decisions. Work closely with senior technical and business stakeholders to influence strategy and delivery. Mentor and coach Solutions Architects and Engineers, helping raise capability across the wider architecture community. Represent the organisation at senior customer forums, technical boards and industry events. Support business-winning activity, including solution strategy, bids and proposal development. Champion architectural best practice, reuse and model-based design approaches. What We're Looking For You'll bring extensive technical expertise and a proven track record of designing secure, integrated solutions across complex environments. We're particularly interested in candidates who can: Operate as a recognised technical authority within their domain. Influence technical strategy and make complex architectural decisions. Communicate confidently with senior technical, customer and business stakeholders. Provide mentoring, coaching and thought leadership within an architecture community. Essential Skills & Experience Proven experience in Solution Architecture across multiple technical domains , including infrastructure, applications, data, networking and cloud. Strong knowledge of enterprise and solution architecture frameworks , such as TOGAF, MODAF and/or NAF. Advanced understanding of secure system design principles and cyber security standards . Experience designing and shaping architectures within Agile and/or SAFe delivery environments . Experience working within UK secure environments and classified MOD systems . Ability to mentor, coach and provide technical thought leadership across an architecture or engineering community. Current UK MOD DV clearance . Desirable Experience Industry certifications such as TOGAF, ArchiMate or recognised architecture qualifications . Experience contributing to technology roadmaps and enterprise-level strategy. Knowledge of service design, operational transformation and digital modernisation. Exposure to cloud-native, DevSecOps and automation approaches. Experience presenting at technical boards, customer forums or industry conferences. Why Consider This Opportunity? This is an opportunity to work at a senior level on complex, security-critical defence programmes , where your architectural expertise will directly influence technical strategy and delivery. You'll have the opportunity to work alongside experienced engineering and architecture teams, influence major design decisions and contribute to the development of future technology capabilities. This isn't an exhaustive list. If you have strong Solutions Architecture experience and a positive, collaborative attitude, we'd still be keen to hear from you even if you don't tick every desirable box.
Location: Bristol (mostly onsite) Duration: 6 month contract Rate: 110ph UMB (Inside IR35) Clearance: Active DV preferred Role details: Our client is seeking a Solutions Architect to support complex defence and security programmes in Bristol. This six-month contract offers the opportunity to provide technical leadership across secure, integrated solutions, with the role being predominantly onsite. Active DV clearance is preferred. Key Responsibilities: Act as the technical authority for solution design across large-scale and multi-project programmes Define and evolve architectures that balance customer needs, enterprise principles and secure-by-design standards Contribute to technology roadmaps, identifying opportunities for innovation and technology insertion Lead technical reviews, trade-off studies and risk assessments for major design decisions Mentor and coach Solutions Architects and Engineers, supporting capability development across the technical community Represent the organisation at senior customer forums, technical boards and industry events Support business-winning activities, including solution strategy, bids and proposal development Champion architectural best practice, reuse and model-based design approaches Job Requirements: Extensive technical expertise with a proven track record of designing secure, integrated solutions Significant experience in solution architecture across infrastructure, applications, data, networking and cloud Strong knowledge of enterprise and solution architecture frameworks, such as TOGAF, MODAF or NAF Advanced understanding of secure system design principles and cyber security standards Experience shaping architectures within Agile or SAFe delivery environments Experience working within UK secure environments and classified Ministry of Defence systems Strong communication skills, with the ability to influence technical strategy and engage senior stakeholders Ability to mentor, coach and provide thought leadership within a technical community Desirable Skills: Active DV clearance Relevant industry certifications, such as TOGAF, Architect or ArchiMate Experience contributing to technology roadmaps and enterprise strategy Familiarity with service design, operational transformation and digital modernisation Exposure to cloud-native, DevSecOps and automation approaches Experience presenting at technical boards, customer forums or industry conferences If you are an experienced Solutions Architect with expertise in secure systems and defence environments, apply now to support our client's high-profile technical programmes in Bristol.
01/11/2026
Contractor
Location: Bristol (mostly onsite) Duration: 6 month contract Rate: 110ph UMB (Inside IR35) Clearance: Active DV preferred Role details: Our client is seeking a Solutions Architect to support complex defence and security programmes in Bristol. This six-month contract offers the opportunity to provide technical leadership across secure, integrated solutions, with the role being predominantly onsite. Active DV clearance is preferred. Key Responsibilities: Act as the technical authority for solution design across large-scale and multi-project programmes Define and evolve architectures that balance customer needs, enterprise principles and secure-by-design standards Contribute to technology roadmaps, identifying opportunities for innovation and technology insertion Lead technical reviews, trade-off studies and risk assessments for major design decisions Mentor and coach Solutions Architects and Engineers, supporting capability development across the technical community Represent the organisation at senior customer forums, technical boards and industry events Support business-winning activities, including solution strategy, bids and proposal development Champion architectural best practice, reuse and model-based design approaches Job Requirements: Extensive technical expertise with a proven track record of designing secure, integrated solutions Significant experience in solution architecture across infrastructure, applications, data, networking and cloud Strong knowledge of enterprise and solution architecture frameworks, such as TOGAF, MODAF or NAF Advanced understanding of secure system design principles and cyber security standards Experience shaping architectures within Agile or SAFe delivery environments Experience working within UK secure environments and classified Ministry of Defence systems Strong communication skills, with the ability to influence technical strategy and engage senior stakeholders Ability to mentor, coach and provide thought leadership within a technical community Desirable Skills: Active DV clearance Relevant industry certifications, such as TOGAF, Architect or ArchiMate Experience contributing to technology roadmaps and enterprise strategy Familiarity with service design, operational transformation and digital modernisation Exposure to cloud-native, DevSecOps and automation approaches Experience presenting at technical boards, customer forums or industry conferences If you are an experienced Solutions Architect with expertise in secure systems and defence environments, apply now to support our client's high-profile technical programmes in Bristol.
Power BI Technical Architect Umbrella Rate: 1200 - 1,250 per day (Inside IR35) Location: Bristol 1-2 days every other week. Plus 1-2 days in London and/or Birmingham a month Clearance: Active MOD SC Clearance Required Nationality Requirement: Sole UK National The Opportunity We are seeking an experienced SC Cleared Power BI Technical Architect to lead the design, governance, and delivery of enterprise-scale reporting, analytics, and business intelligence solutions within a major public sector transformation programme. This is a client-facing role where you'll define the Power BI strategy, provide technical leadership across the Microsoft data platform, and ensure analytics solutions are secure, scalable, performant, and aligned to business objectives. Key Responsibilities Define and own the Power BI architecture, standards, and roadmap. Design end-to-end reporting and analytics solutions across the Microsoft data platform. Lead the design and governance of: Power BI Workspaces Semantic Models/Datasets Dataflows Dashboards and Reports Develop scalable dimensional data models and reporting frameworks. Integrate Power BI with enterprise data platforms including Azure SQL, Data Lake, Synapse, Fabric, and Oracle environments. Establish governance, security, audit, and reporting standards. Define and implement Row-Level Security (RLS), workspace controls, and access management. Provide technical leadership and architectural assurance throughout delivery. Mentor developers and analysts while promoting reusable patterns and best practices. Work closely with Data Engineering, Security, DevOps, Product, and Delivery teams. Essential Skills & Experience Proven experience as a Power BI Technical Architect , Solution Architect, or Senior Power BI Lead. Deep hands-on expertise with: Power BI DAX Power Query Semantic Models Dataflows Deployment Pipelines Power BI Administration Experience integrating Power BI with: Azure SQL Azure Data Lake Microsoft Fabric Azure Synapse Enterprise Data Platforms Strong dimensional data modelling experience. Experience designing secure and governed analytics solutions. Knowledge of data governance, lineage, metadata, and data quality principles. Experience implementing CI/CD and source control practices for Power BI solutions. Strong stakeholder management and communication skills. Experience delivering within large-scale public sector or enterprise transformation programmes. Desirable Skills Microsoft Fabric Azure Data Factory Databricks Azure DevOps SQL Server Oracle Cloud environments DevSecOps and Infrastructure as Code practices TOGAF, Azure Architecture, or Microsoft Power BI certifications What We're Looking For You'll be a technically strong architect who combines deep Power BI expertise with excellent stakeholder engagement skills. You'll be comfortable shaping enterprise reporting strategies, mentoring delivery teams, and driving governance and best practices across large-scale data and analytics programmes. If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.
01/11/2026
Contractor
Power BI Technical Architect Umbrella Rate: 1200 - 1,250 per day (Inside IR35) Location: Bristol 1-2 days every other week. Plus 1-2 days in London and/or Birmingham a month Clearance: Active MOD SC Clearance Required Nationality Requirement: Sole UK National The Opportunity We are seeking an experienced SC Cleared Power BI Technical Architect to lead the design, governance, and delivery of enterprise-scale reporting, analytics, and business intelligence solutions within a major public sector transformation programme. This is a client-facing role where you'll define the Power BI strategy, provide technical leadership across the Microsoft data platform, and ensure analytics solutions are secure, scalable, performant, and aligned to business objectives. Key Responsibilities Define and own the Power BI architecture, standards, and roadmap. Design end-to-end reporting and analytics solutions across the Microsoft data platform. Lead the design and governance of: Power BI Workspaces Semantic Models/Datasets Dataflows Dashboards and Reports Develop scalable dimensional data models and reporting frameworks. Integrate Power BI with enterprise data platforms including Azure SQL, Data Lake, Synapse, Fabric, and Oracle environments. Establish governance, security, audit, and reporting standards. Define and implement Row-Level Security (RLS), workspace controls, and access management. Provide technical leadership and architectural assurance throughout delivery. Mentor developers and analysts while promoting reusable patterns and best practices. Work closely with Data Engineering, Security, DevOps, Product, and Delivery teams. Essential Skills & Experience Proven experience as a Power BI Technical Architect , Solution Architect, or Senior Power BI Lead. Deep hands-on expertise with: Power BI DAX Power Query Semantic Models Dataflows Deployment Pipelines Power BI Administration Experience integrating Power BI with: Azure SQL Azure Data Lake Microsoft Fabric Azure Synapse Enterprise Data Platforms Strong dimensional data modelling experience. Experience designing secure and governed analytics solutions. Knowledge of data governance, lineage, metadata, and data quality principles. Experience implementing CI/CD and source control practices for Power BI solutions. Strong stakeholder management and communication skills. Experience delivering within large-scale public sector or enterprise transformation programmes. Desirable Skills Microsoft Fabric Azure Data Factory Databricks Azure DevOps SQL Server Oracle Cloud environments DevSecOps and Infrastructure as Code practices TOGAF, Azure Architecture, or Microsoft Power BI certifications What We're Looking For You'll be a technically strong architect who combines deep Power BI expertise with excellent stakeholder engagement skills. You'll be comfortable shaping enterprise reporting strategies, mentoring delivery teams, and driving governance and best practices across large-scale data and analytics programmes. If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.
About Expleo Expleo is a trusted global partner for end-to-end engineering, technology, and consulting services. We help organisations accelerate innovation, improve operational efficiency, and deliver complex transformation programmes across multiple industries including automotive, financial services, aerospace, defence, energy, and public sector. We combine deep technical expertise with a collaborative and people-focused culture, enabling our teams to solve challenging business problems through innovative technology solutions. The Role We are seeking a highly capable Cloud & DevOps Engineer to join our growing technology team. This role will play a key part in supporting, maintaining, and modernising cloud-hosted applications and delivery platforms across multiple product teams. You will be responsible for troubleshooting complex CI/CD environments, supporting cloud infrastructure across AWS and Azure, investigating production issues, enhancing platform security, and contributing to the development and modernisation of enterprise applications. This is an excellent opportunity for a hands-on engineer who enjoys working across infrastructure, cloud, software development, and DevSecOps disciplines while driving continuous improvement and engineering excellence. Cloud & Platform Engineering Troubleshoot, analyse, and resolve issues within CI/CD pipelines across multiple teams and environments. Support and maintain deployment pipelines using: Concourse (Fly CLI) Azure DevOps Kubernetes-based platforms Manage and optimise cloud infrastructure hosted within AWS and Microsoft Azure. Ensure cloud environments remain secure, reliable, scalable, and operationally efficient. Monitor platform performance and availability using cloud-native monitoring tools. Investigate and resolve infrastructure and deployment-related issues. Application Development Design, develop, enhance, and support applications using C# and .NET technologies. Apply Clean Architecture and Domain-Driven Design (DDD) principles to create scalable and maintainable solutions. Contribute to technical design decisions and solution architecture discussions. Support software lifecycle management, releases, and ongoing maintenance activities. DevOps & Containerisation Build, maintain, and improve containerised deployment solutions using Docker. Support Kubernetes deployments and associated tooling. Automate operational and deployment processes wherever possible. Improve development workflows and engineering productivity through automation. Security & Modernisation Conduct security reviews and vulnerability remediation activities. Assess and remediate security findings within legacy TypeScript and React applications. Support application, dependency, and infrastructure upgrades. Drive modernisation initiatives to ensure platforms remain supported, secure, and aligned with current best practices. Implement security improvements based on audit findings and threat assessments. Incident Management & Operational Support Investigate production incidents across infrastructure, application, and deployment layers. Perform root cause analysis and implement preventative measures. Coordinate resolution activities with cross-functional teams and stakeholders. Contribute to operational support, monitoring, and continuous service improvement activities.
01/11/2026
Full time
About Expleo Expleo is a trusted global partner for end-to-end engineering, technology, and consulting services. We help organisations accelerate innovation, improve operational efficiency, and deliver complex transformation programmes across multiple industries including automotive, financial services, aerospace, defence, energy, and public sector. We combine deep technical expertise with a collaborative and people-focused culture, enabling our teams to solve challenging business problems through innovative technology solutions. The Role We are seeking a highly capable Cloud & DevOps Engineer to join our growing technology team. This role will play a key part in supporting, maintaining, and modernising cloud-hosted applications and delivery platforms across multiple product teams. You will be responsible for troubleshooting complex CI/CD environments, supporting cloud infrastructure across AWS and Azure, investigating production issues, enhancing platform security, and contributing to the development and modernisation of enterprise applications. This is an excellent opportunity for a hands-on engineer who enjoys working across infrastructure, cloud, software development, and DevSecOps disciplines while driving continuous improvement and engineering excellence. Cloud & Platform Engineering Troubleshoot, analyse, and resolve issues within CI/CD pipelines across multiple teams and environments. Support and maintain deployment pipelines using: Concourse (Fly CLI) Azure DevOps Kubernetes-based platforms Manage and optimise cloud infrastructure hosted within AWS and Microsoft Azure. Ensure cloud environments remain secure, reliable, scalable, and operationally efficient. Monitor platform performance and availability using cloud-native monitoring tools. Investigate and resolve infrastructure and deployment-related issues. Application Development Design, develop, enhance, and support applications using C# and .NET technologies. Apply Clean Architecture and Domain-Driven Design (DDD) principles to create scalable and maintainable solutions. Contribute to technical design decisions and solution architecture discussions. Support software lifecycle management, releases, and ongoing maintenance activities. DevOps & Containerisation Build, maintain, and improve containerised deployment solutions using Docker. Support Kubernetes deployments and associated tooling. Automate operational and deployment processes wherever possible. Improve development workflows and engineering productivity through automation. Security & Modernisation Conduct security reviews and vulnerability remediation activities. Assess and remediate security findings within legacy TypeScript and React applications. Support application, dependency, and infrastructure upgrades. Drive modernisation initiatives to ensure platforms remain supported, secure, and aligned with current best practices. Implement security improvements based on audit findings and threat assessments. Incident Management & Operational Support Investigate production incidents across infrastructure, application, and deployment layers. Perform root cause analysis and implement preventative measures. Coordinate resolution activities with cross-functional teams and stakeholders. Contribute to operational support, monitoring, and continuous service improvement activities.
At CV-Library, we have a simple vision: to help the world to work and we are looking for exceptional and talented people to help us realise this vision in both UK and overseas markets. We are in a period of focused internal investment, following a year of key strategic acquisitions and significant investment across all parts of the business, from Tech and Data to People and HR, there's never been a more exciting time to join us or a better place to grow your career! The Role Hours: Monday-Friday, 9:00-17:30 Location: Fleet Working Pattern: Hybrid This is a security role built for someone who wants to own the threat, not just log it. As Security Engineer, you'll be the person who understands what's actually at risk across a modern Cloud native microservice platform and our internal IT estate, from SIEM alerts to Microsoft 365 endpoint security, and who sets the priorities that matter. You won't be buried in compliance paperwork. You'll direct a capable Platform Ops team on remediation while you stay focused on the threat picture, the tooling and the DevSecOps thinking that keeps CV-Library ahead of it. You'll report directly to the Platform & Service Operations Manager, with a genuine mandate to shape how security is done, not just document it. Compliance still matters, and you'll keep ISO 27001 documentation and audit evidence in good shape as you go, but it's the by-product of doing security well, not the job itself. Responsibilities: Own the day-to-day management of security alerts, investigations and incidents across CV-Library's technology estate Monitor emerging cyber threats and threat intelligence, assessing potential risks and recommending improvements to security controls Lead the initial response to security incidents, coordinating containment and remediation activities with relevant technical teams Maintain incident records, conduct post-incident reviews and ensure lessons are learned are embedded into processes, tooling and controls Manage and continuously improve the organisation's security tooling, including SIEM, endpoint protection, vulnerability management and cloud security solutions Take ownership of endpoint and Microsoft 365 security, including device security, conditional access policies and identity protection controls Define and maintain security standards and guardrails for cloud infrastructure and software delivery, working closely with Platform DevOps teams Manage identity and access management processes, supporting user provisioning, access reviews and least-privilege principles Act as the security subject matter expert, providing guidance on infrastructure, platform and application changes Oversee the vulnerability management lifecycle, ensuring security weaknesses are identified, prioritised and remediated effectively Coordinate external penetration testing activities and track remediation actions through to completion Maintain security documentation, policies and audit evidence, supporting ongoing ISO 27001 compliance and certification requirements Apply GDPR and data protection principles to ensure security controls, processes and documentation meet regulatory expectations Support supplier and third-party security assessments, helping to identify and manage external risks Assess the secure use of AI technologies across the business and champion a strong security culture by promoting best practice across best technology and non-technical teams What we're looking for Strong technical knowledge of security tools, frameworks and best practice Solid understanding of cloud-native infrastructure (AWS, Kubernetes/EKS) sufficient to assess and prioritise risk and to direct Platform Ops on remediation, without owning infrastructure changes directly Experience with penetration testing engagement and vulnerability management processes Understanding of endpoint protection technologies and policy configuration, including Microsoft 365 security tooling (e.g. Defender, Intune, Conditional Access) Working knowledge of Identity and Access Management principles Strong incident response and threat intelligence skills, including SIEM-based monitoring and triage Familiarity with security accreditations such as ISO 27001 and what they require operationally Working knowledge of UK GDPR and data protection principles, particularly as they relate to security control and audit documentation Excellent communication skills, able to convey security matters clearly to both technical and non-technical audiences We are actively committed to promoting a fully diverse and inclusive workforce and we welcome applications for this role from all candidates who meet the key requirements. Please do not hesitate to get in touch should you require any reasonable adjustments to assist with your application.
01/11/2026
Full time
At CV-Library, we have a simple vision: to help the world to work and we are looking for exceptional and talented people to help us realise this vision in both UK and overseas markets. We are in a period of focused internal investment, following a year of key strategic acquisitions and significant investment across all parts of the business, from Tech and Data to People and HR, there's never been a more exciting time to join us or a better place to grow your career! The Role Hours: Monday-Friday, 9:00-17:30 Location: Fleet Working Pattern: Hybrid This is a security role built for someone who wants to own the threat, not just log it. As Security Engineer, you'll be the person who understands what's actually at risk across a modern Cloud native microservice platform and our internal IT estate, from SIEM alerts to Microsoft 365 endpoint security, and who sets the priorities that matter. You won't be buried in compliance paperwork. You'll direct a capable Platform Ops team on remediation while you stay focused on the threat picture, the tooling and the DevSecOps thinking that keeps CV-Library ahead of it. You'll report directly to the Platform & Service Operations Manager, with a genuine mandate to shape how security is done, not just document it. Compliance still matters, and you'll keep ISO 27001 documentation and audit evidence in good shape as you go, but it's the by-product of doing security well, not the job itself. Responsibilities: Own the day-to-day management of security alerts, investigations and incidents across CV-Library's technology estate Monitor emerging cyber threats and threat intelligence, assessing potential risks and recommending improvements to security controls Lead the initial response to security incidents, coordinating containment and remediation activities with relevant technical teams Maintain incident records, conduct post-incident reviews and ensure lessons are learned are embedded into processes, tooling and controls Manage and continuously improve the organisation's security tooling, including SIEM, endpoint protection, vulnerability management and cloud security solutions Take ownership of endpoint and Microsoft 365 security, including device security, conditional access policies and identity protection controls Define and maintain security standards and guardrails for cloud infrastructure and software delivery, working closely with Platform DevOps teams Manage identity and access management processes, supporting user provisioning, access reviews and least-privilege principles Act as the security subject matter expert, providing guidance on infrastructure, platform and application changes Oversee the vulnerability management lifecycle, ensuring security weaknesses are identified, prioritised and remediated effectively Coordinate external penetration testing activities and track remediation actions through to completion Maintain security documentation, policies and audit evidence, supporting ongoing ISO 27001 compliance and certification requirements Apply GDPR and data protection principles to ensure security controls, processes and documentation meet regulatory expectations Support supplier and third-party security assessments, helping to identify and manage external risks Assess the secure use of AI technologies across the business and champion a strong security culture by promoting best practice across best technology and non-technical teams What we're looking for Strong technical knowledge of security tools, frameworks and best practice Solid understanding of cloud-native infrastructure (AWS, Kubernetes/EKS) sufficient to assess and prioritise risk and to direct Platform Ops on remediation, without owning infrastructure changes directly Experience with penetration testing engagement and vulnerability management processes Understanding of endpoint protection technologies and policy configuration, including Microsoft 365 security tooling (e.g. Defender, Intune, Conditional Access) Working knowledge of Identity and Access Management principles Strong incident response and threat intelligence skills, including SIEM-based monitoring and triage Familiarity with security accreditations such as ISO 27001 and what they require operationally Working knowledge of UK GDPR and data protection principles, particularly as they relate to security control and audit documentation Excellent communication skills, able to convey security matters clearly to both technical and non-technical audiences We are actively committed to promoting a fully diverse and inclusive workforce and we welcome applications for this role from all candidates who meet the key requirements. Please do not hesitate to get in touch should you require any reasonable adjustments to assist with your application.
Technical Lead Full Stack Developer (TypeScript, JavaScript, Node) Location: Hybrid working Salary: Competitive + benefits We're working with a fast-growing UK SaaS technology company that builds data-driven digital products used by commercial teams to better understand and engage with their customers. They are now looking for an experienced technical lead full stack developer to play a key role in shaping and delivering their next generation of customer-facing platforms. This is a hands-on technical leadership role where you'll be involved from early design through to production delivery, working with a modern cloud-based stack and deploying to live environments on a daily basis. The Role Lead technical delivery across a high-performing development squad (10+) Contribute to solution design, system architecture and domain modelling Build proof-of-concepts and spike complex or uncertain areas of work Break down requirements into deliverable epics and user stories alongside product and initiative managers Develop and deliver production-ready code across the full stack Ensure high standards of quality, maintainability, performance and security Support and improve live systems once deployed Influence technical direction, tooling and best practice across the wider engineering function Tech Environment You'll work with a modern stack including: Node.js microservices JavaScript & TypeScript Vue.js Redis, SQL Server & Snowflake AWS cloud infrastructure CI/CD pipelines and DevSecOps practices About You Strong full stack development experience (ideally 10+ years) 5+ years of JavaScript and TypeScript experience Solid background in system design and scalable architectures Experience building large, production SaaS platforms A clean-code mindset (SOLID principles, design patterns, testable code) Experience working in mature CI/CD and continuous deployment environments A commercial mindset when designing and delivering software Excellent collaboration skills and confidence working with stakeholders Interest in using AI to accelerate and improve software development A passion for performance, security and engineering best practice Degree in Computer Science or equivalent real-world experience What's On Offer Competitive salary and benefits package Hybrid working Opportunity to join a scaling UK SaaS business Strong engineering culture with a focus on quality and continuous improvement Supportive, collaborative working environment Community and charity initiatives, including volunteer days Send your CV across to me on email (url removed) or call (phone number removed) for more information. Spectrum IT Recruitment (South) Limited is acting as an Employment Agency in relation to this vacancy.
01/11/2026
Full time
Technical Lead Full Stack Developer (TypeScript, JavaScript, Node) Location: Hybrid working Salary: Competitive + benefits We're working with a fast-growing UK SaaS technology company that builds data-driven digital products used by commercial teams to better understand and engage with their customers. They are now looking for an experienced technical lead full stack developer to play a key role in shaping and delivering their next generation of customer-facing platforms. This is a hands-on technical leadership role where you'll be involved from early design through to production delivery, working with a modern cloud-based stack and deploying to live environments on a daily basis. The Role Lead technical delivery across a high-performing development squad (10+) Contribute to solution design, system architecture and domain modelling Build proof-of-concepts and spike complex or uncertain areas of work Break down requirements into deliverable epics and user stories alongside product and initiative managers Develop and deliver production-ready code across the full stack Ensure high standards of quality, maintainability, performance and security Support and improve live systems once deployed Influence technical direction, tooling and best practice across the wider engineering function Tech Environment You'll work with a modern stack including: Node.js microservices JavaScript & TypeScript Vue.js Redis, SQL Server & Snowflake AWS cloud infrastructure CI/CD pipelines and DevSecOps practices About You Strong full stack development experience (ideally 10+ years) 5+ years of JavaScript and TypeScript experience Solid background in system design and scalable architectures Experience building large, production SaaS platforms A clean-code mindset (SOLID principles, design patterns, testable code) Experience working in mature CI/CD and continuous deployment environments A commercial mindset when designing and delivering software Excellent collaboration skills and confidence working with stakeholders Interest in using AI to accelerate and improve software development A passion for performance, security and engineering best practice Degree in Computer Science or equivalent real-world experience What's On Offer Competitive salary and benefits package Hybrid working Opportunity to join a scaling UK SaaS business Strong engineering culture with a focus on quality and continuous improvement Supportive, collaborative working environment Community and charity initiatives, including volunteer days Send your CV across to me on email (url removed) or call (phone number removed) for more information. Spectrum IT Recruitment (South) Limited is acting as an Employment Agency in relation to this vacancy.
Key Responsibilities: Produce High Level Designs (HLDs) and Low Level Designs (LLDs) for identity capabilities. Define end-to-end Technical Solutions across business, application, data and infrastructure domains. Translate business, security and regulatory requirements into technical solutions. Develop reference architectures, patterns and design standards for the programme. Define integration patterns between identity platforms, applications and infrastructure. Design cloud-native solutions for GCP and Kubernetes environments. Define authentication, authorisation and federation architectures. Design Agent Identity, Human Identity and Workload Identity capabilities. Define Zero Trust security architecture and trust boundaries. Design API security, service-to-service authentication and workload authentication patterns. Develop event-driven integration architectures using messaging and asynchronous processing. Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code. Define secrets management, certificate lifecycle and PKI integration patterns. Design resilience, disaster recovery and high availability architectures. Ensure solutions meet non-functional requirements for security, scalability, resilience and performance. Produce architecture decision records (ADRs) and design documentation. Support governance through Architecture Review Boards and Design Authorities. Perform solution assurance and technical design reviews across supplier deliveries. Identify technical risks, assumptions, constraints and dependencies. Collaborate with Enterprise Architecture to ensure alignment with strategic architecture. Work with Product Owners to refine technical requirements and delivery priorities. Support engineering teams throughout implementation, testing and production readiness. Mentor engineers and promote engineering best practice. Evaluate new technologies and vendor products against programme requirements. Contribute to roadmap planning and future-state architecture. Key Skills & Experience: Enterprise Architecture Identity and Access Management (IAM) Authentication and Authorisation Zero Trust Architecture Agent Identity and Workload Identity Identity Federation (OIDC, OAuth2, SAML, SCIM) Cloud Architecture (GCP) Kubernetes and Service Mesh API Architecture and Security Event-driven Architecture Policy-as-Code (OPA/Cedar) PKI, Certificates and Secrets Management DevSecOps and CI/CD High Availability and Resilience Design Security Architecture Architecture Governance Stakeholder Management Technical Leadership
01/11/2026
Contractor
Key Responsibilities: Produce High Level Designs (HLDs) and Low Level Designs (LLDs) for identity capabilities. Define end-to-end Technical Solutions across business, application, data and infrastructure domains. Translate business, security and regulatory requirements into technical solutions. Develop reference architectures, patterns and design standards for the programme. Define integration patterns between identity platforms, applications and infrastructure. Design cloud-native solutions for GCP and Kubernetes environments. Define authentication, authorisation and federation architectures. Design Agent Identity, Human Identity and Workload Identity capabilities. Define Zero Trust security architecture and trust boundaries. Design API security, service-to-service authentication and workload authentication patterns. Develop event-driven integration architectures using messaging and asynchronous processing. Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code. Define secrets management, certificate lifecycle and PKI integration patterns. Design resilience, disaster recovery and high availability architectures. Ensure solutions meet non-functional requirements for security, scalability, resilience and performance. Produce architecture decision records (ADRs) and design documentation. Support governance through Architecture Review Boards and Design Authorities. Perform solution assurance and technical design reviews across supplier deliveries. Identify technical risks, assumptions, constraints and dependencies. Collaborate with Enterprise Architecture to ensure alignment with strategic architecture. Work with Product Owners to refine technical requirements and delivery priorities. Support engineering teams throughout implementation, testing and production readiness. Mentor engineers and promote engineering best practice. Evaluate new technologies and vendor products against programme requirements. Contribute to roadmap planning and future-state architecture. Key Skills & Experience: Enterprise Architecture Identity and Access Management (IAM) Authentication and Authorisation Zero Trust Architecture Agent Identity and Workload Identity Identity Federation (OIDC, OAuth2, SAML, SCIM) Cloud Architecture (GCP) Kubernetes and Service Mesh API Architecture and Security Event-driven Architecture Policy-as-Code (OPA/Cedar) PKI, Certificates and Secrets Management DevSecOps and CI/CD High Availability and Resilience Design Security Architecture Architecture Governance Stakeholder Management Technical Leadership
Azure Cloud Security Engineer Hybrid 1day/wk Evaluate new security technologies and cloud services, performing engineering work and security analysis to determine if solutions should be pursued, and subsequently implementing them as required, focusing on cloud-first and cloud-native technologies. Develop cloud security solutions by applying the principles of Security as Code using cloud automation tooling and adhering to industry best practices. Collaborate closely with Security Architects to define and own the cloud security strategy, ensuring a continuously updated and secure environment. Establish cloud security best practices and develop, construct, and evaluate cloud-native services that offer necessary guardrails for developers. Validate and ensure that cloud solutions meet security standards, are properly governed, and delivered in accordance with guidelines. Embrace agile working practices, collaborating with teams across engineering disciplines and strategic partners to release enterprise-class cloud services. About you Relevant certifications (e.g., Azure Security Engineer, CCSP, CISSP, CCSK) are highly desirable. Proven experience in designing, implementing, and securing cloud environments, with a strong emphasis on Microsoft Azure services. Strong understanding of regulatory compliance requirements (e.g. GDPR, ISO 27001, NIST) and experience implementing security controls to meet those requirements. In-depth knowledge of cloud security best practices, network security, identity and access management, encryption, and secure coding principles. Hands-on experience with Azure Kubernetes Service (AKS) and microservices architecture. Familiarity with DevSecOps methodologies and tools, enabling the seamless integration of security into the development process. Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms. In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL. Familiarity with scripting toolsets and automation with Microsoft ARM, BICEP, PowerShell, Python. Track record of successfully designing, building, and deploying scalable, secure, and highly available security infrastructures using Azure. Strong proficiency in leveraging data and advanced analytics to drive decision-making and continuously enhance security solutions. Expertise in utilizing Azure DevOps to drive efficient and collaborative development processes, including the development of security solutions and updates in code.
01/11/2026
Full time
Azure Cloud Security Engineer Hybrid 1day/wk Evaluate new security technologies and cloud services, performing engineering work and security analysis to determine if solutions should be pursued, and subsequently implementing them as required, focusing on cloud-first and cloud-native technologies. Develop cloud security solutions by applying the principles of Security as Code using cloud automation tooling and adhering to industry best practices. Collaborate closely with Security Architects to define and own the cloud security strategy, ensuring a continuously updated and secure environment. Establish cloud security best practices and develop, construct, and evaluate cloud-native services that offer necessary guardrails for developers. Validate and ensure that cloud solutions meet security standards, are properly governed, and delivered in accordance with guidelines. Embrace agile working practices, collaborating with teams across engineering disciplines and strategic partners to release enterprise-class cloud services. About you Relevant certifications (e.g., Azure Security Engineer, CCSP, CISSP, CCSK) are highly desirable. Proven experience in designing, implementing, and securing cloud environments, with a strong emphasis on Microsoft Azure services. Strong understanding of regulatory compliance requirements (e.g. GDPR, ISO 27001, NIST) and experience implementing security controls to meet those requirements. In-depth knowledge of cloud security best practices, network security, identity and access management, encryption, and secure coding principles. Hands-on experience with Azure Kubernetes Service (AKS) and microservices architecture. Familiarity with DevSecOps methodologies and tools, enabling the seamless integration of security into the development process. Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms. In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL. Familiarity with scripting toolsets and automation with Microsoft ARM, BICEP, PowerShell, Python. Track record of successfully designing, building, and deploying scalable, secure, and highly available security infrastructures using Azure. Strong proficiency in leveraging data and advanced analytics to drive decision-making and continuously enhance security solutions. Expertise in utilizing Azure DevOps to drive efficient and collaborative development processes, including the development of security solutions and updates in code.
Senior Software Engineer The Role: This is a highly varied role giving the successful candidate the opportunity to work across multiple projects and at all stages of the Software Development Lifecycle. Whilst focused on software development, this role also provides the opportunity to participate in software design at all levels. This will include work on: Research & Development Internally and externally funded research and development products investigating and developing low TRL technologies. Product Development Development and support of Synoptix products, primarily in the AI and Computer Vision (object detection and track) domains. Service Development Development of Synoptix services, including our upcoming AI Assurance service offering. Key Responsibilities: Leading Software Development Projects Act as part of a multidisciplinary team to develop products and services. This will include Systems Engineers, Security Engineers, Product Managers and others as required. Support the wider team in project planning, requirements definition and requirements analysis. Lead software design, development, testing, deployment and maintenance for a range of AI and Computer Vision products. Contribute to a culture of continuous improvement, identifying opportunities to enhance our processes, tooling, infrastructure and development frameworks. Providing Software Engineering Subject Matter (SME) Expertise Act as part of multidisciplinary teams in delivering engineering services to Synoptix clients. Provide SME guidance to Synoptix clients on the architecture and design of their software solutions. Provide technical documentation, briefings and presentations to internal and external stakeholders at all levels of seniority. Key Skills: We are interested in any of the following skills, but they are not essential for you to apply: Strong proficiency in Python with experience in C++ development Creative problem-solving skills Experience with Linux operating systems (e.g. Red Hat, Ubuntu) Experience working within a variety of development frameworks and practices e.g. DevOps, DevSecOps, SCRUM, MLOps, XP. Experience with data analysis and manipulation tools (e.g. Pandas) Experience of a broad section of the Software Development Lifecycle (SDLC) with specific focus on: Design (Architecting, High-Level Design and Low-Level Design) Development Testing Deployment & Maintenance Experience of using the Unified Modelling Language Excellent communication skills Desirable Skills: Experience in the development of computer vision related products and services. Experience with visual processing libraries; OpenCV, TensorFlow, PyTorch etc. Experience in personnel management Experience operating as part of a multidisciplinary team Experience developing and/or implementing reference architectures Experience in the development of Test Harnesses Benefits: Annual Company Bonus Based on company performance 25 Days holiday not including bank holidays with the option to buy/sell up to 5 days Flexible hybrid working arrangements Continuous professional development including incentives Access to online Udemy training facility to support grade specific learning pathways Electric car scheme Bike to work scheme Private health care About Us: Synoptix was formed in 2011 to provide engineering solutions across various technical industries. We have evolved from a company established and focussed on Systems Thinking principles into an Engineering company providing solutions and services across three key capabilities: Systems, Cyber & InfoSec and Technology. What makes us stand out is how we engage in the crossover areas between these disciplines, combining our strengths to provide a truly bespoke, market leading approach. Our engineering competence is bolstered by expertise in commercial, legal, financial and resource, thereby ensuring that we uphold excellence in our product and service offerings. Please note that due to the nature of our projects we can only accept Sole UK National candidates who will need to be eligible to obtain UK Security Clearance. By applying to this position, you are confirming that you consent to the retention of your personal data. Your data is held securely on our own premises and under the terms of the Data Protection Act (2018). It will be treated as confidential, and will not be transferred to any third party, or to any other jurisdiction without your consent. We will not hold any data for any longer than is necessary for us to fulfil our obligations and will remove any data at your written request.
01/11/2026
Full time
Senior Software Engineer The Role: This is a highly varied role giving the successful candidate the opportunity to work across multiple projects and at all stages of the Software Development Lifecycle. Whilst focused on software development, this role also provides the opportunity to participate in software design at all levels. This will include work on: Research & Development Internally and externally funded research and development products investigating and developing low TRL technologies. Product Development Development and support of Synoptix products, primarily in the AI and Computer Vision (object detection and track) domains. Service Development Development of Synoptix services, including our upcoming AI Assurance service offering. Key Responsibilities: Leading Software Development Projects Act as part of a multidisciplinary team to develop products and services. This will include Systems Engineers, Security Engineers, Product Managers and others as required. Support the wider team in project planning, requirements definition and requirements analysis. Lead software design, development, testing, deployment and maintenance for a range of AI and Computer Vision products. Contribute to a culture of continuous improvement, identifying opportunities to enhance our processes, tooling, infrastructure and development frameworks. Providing Software Engineering Subject Matter (SME) Expertise Act as part of multidisciplinary teams in delivering engineering services to Synoptix clients. Provide SME guidance to Synoptix clients on the architecture and design of their software solutions. Provide technical documentation, briefings and presentations to internal and external stakeholders at all levels of seniority. Key Skills: We are interested in any of the following skills, but they are not essential for you to apply: Strong proficiency in Python with experience in C++ development Creative problem-solving skills Experience with Linux operating systems (e.g. Red Hat, Ubuntu) Experience working within a variety of development frameworks and practices e.g. DevOps, DevSecOps, SCRUM, MLOps, XP. Experience with data analysis and manipulation tools (e.g. Pandas) Experience of a broad section of the Software Development Lifecycle (SDLC) with specific focus on: Design (Architecting, High-Level Design and Low-Level Design) Development Testing Deployment & Maintenance Experience of using the Unified Modelling Language Excellent communication skills Desirable Skills: Experience in the development of computer vision related products and services. Experience with visual processing libraries; OpenCV, TensorFlow, PyTorch etc. Experience in personnel management Experience operating as part of a multidisciplinary team Experience developing and/or implementing reference architectures Experience in the development of Test Harnesses Benefits: Annual Company Bonus Based on company performance 25 Days holiday not including bank holidays with the option to buy/sell up to 5 days Flexible hybrid working arrangements Continuous professional development including incentives Access to online Udemy training facility to support grade specific learning pathways Electric car scheme Bike to work scheme Private health care About Us: Synoptix was formed in 2011 to provide engineering solutions across various technical industries. We have evolved from a company established and focussed on Systems Thinking principles into an Engineering company providing solutions and services across three key capabilities: Systems, Cyber & InfoSec and Technology. What makes us stand out is how we engage in the crossover areas between these disciplines, combining our strengths to provide a truly bespoke, market leading approach. Our engineering competence is bolstered by expertise in commercial, legal, financial and resource, thereby ensuring that we uphold excellence in our product and service offerings. Please note that due to the nature of our projects we can only accept Sole UK National candidates who will need to be eligible to obtain UK Security Clearance. By applying to this position, you are confirming that you consent to the retention of your personal data. Your data is held securely on our own premises and under the terms of the Data Protection Act (2018). It will be treated as confidential, and will not be transferred to any third party, or to any other jurisdiction without your consent. We will not hold any data for any longer than is necessary for us to fulfil our obligations and will remove any data at your written request.
CBSbutler Holdings Limited trading as CBSbutler
City, Sheffield
Job title: IAM Design SME (Zero Trust & Cloud Architecture) Rate: 540 per day Location: Sheffield - 3 days per week Contract: 6 months rolling We're looking for an experienced IAM Design SME to join a major transformation programme at a leading UK bank, delivering next-generation Identity and Access Management (IAM) capabilities. This is a high-impact opportunity to take technical ownership of identity architecture, define secure cloud-native solutions and influence how identity services are designed, integrated and delivered across a complex global enterprise. You'll act as a technical authority across the programme, translating complex security, business and regulatory requirements into robust, scalable and supportable designs. You'll be responsible for: Producing end-to-end High-Level and Low-Level Designs (HLDs/LLDs). Defining IAM architecture across Human, Agent and Workload Identity. Designing Zero Trust, authentication, authorisation and federation solutions. Developing cloud-native architectures across GCP, Kubernetes and service mesh environments. Defining secure API, service-to-service authentication and event-driven integration patterns. Designing Policy-as-Code, PKI, certificate lifecycle and secrets management solutions. Driving architecture governance, design assurance and technical decision-making across multiple workstreams. Working closely with architects, engineering teams and senior stakeholders to deliver production-ready solutions. Expereince: We're looking for someone with strong enterprise-level design experience and a proven track record delivering complex IAM or security architecture. Key experience includes: Enterprise Architecture and Identity & Access Management (IAM). Authentication, authorisation, federation and OIDC, OAuth2, SAML and SCIM. Zero Trust, Agent Identity and Workload Identity. GCP, Kubernetes, service mesh and cloud architecture. API security, event-driven architecture and Policy-as-Code (OPA/Cedar). PKI, certificates, secrets management and DevSecOps/CI/CD. High availability, resilience and security architecture. Architecture governance, stakeholder engagement and technical leadership. If you're an IAM design specialist who can bridge enterprise architecture, identity security and hands-on engineering design, please feel free to submit your CV
01/11/2026
Contractor
Job title: IAM Design SME (Zero Trust & Cloud Architecture) Rate: 540 per day Location: Sheffield - 3 days per week Contract: 6 months rolling We're looking for an experienced IAM Design SME to join a major transformation programme at a leading UK bank, delivering next-generation Identity and Access Management (IAM) capabilities. This is a high-impact opportunity to take technical ownership of identity architecture, define secure cloud-native solutions and influence how identity services are designed, integrated and delivered across a complex global enterprise. You'll act as a technical authority across the programme, translating complex security, business and regulatory requirements into robust, scalable and supportable designs. You'll be responsible for: Producing end-to-end High-Level and Low-Level Designs (HLDs/LLDs). Defining IAM architecture across Human, Agent and Workload Identity. Designing Zero Trust, authentication, authorisation and federation solutions. Developing cloud-native architectures across GCP, Kubernetes and service mesh environments. Defining secure API, service-to-service authentication and event-driven integration patterns. Designing Policy-as-Code, PKI, certificate lifecycle and secrets management solutions. Driving architecture governance, design assurance and technical decision-making across multiple workstreams. Working closely with architects, engineering teams and senior stakeholders to deliver production-ready solutions. Expereince: We're looking for someone with strong enterprise-level design experience and a proven track record delivering complex IAM or security architecture. Key experience includes: Enterprise Architecture and Identity & Access Management (IAM). Authentication, authorisation, federation and OIDC, OAuth2, SAML and SCIM. Zero Trust, Agent Identity and Workload Identity. GCP, Kubernetes, service mesh and cloud architecture. API security, event-driven architecture and Policy-as-Code (OPA/Cedar). PKI, certificates, secrets management and DevSecOps/CI/CD. High availability, resilience and security architecture. Architecture governance, stakeholder engagement and technical leadership. If you're an IAM design specialist who can bridge enterprise architecture, identity security and hands-on engineering design, please feel free to submit your CV
Senior DevOps Engineer AWS / Kubernetes / Terraform / CI/CD / Infrastructure as Code Oxfordshire (Hybrid - 2 days a week in the office) 85,000 - 110,000 DOE Want to be the senior voice on infrastructure, with real say over how software reaches production? This Senior DevOps Engineer role is with a growing UK technology company building AI-led products for customers who work in high-stakes sectors. You'll be the most experienced platform engineer in a small team, with direct influence over the tools, standards and priorities the engineering group works to. It's a permanent role in Oxfordshire, hybrid, with 2 days a week in the office. What You'll Be Doing Designing and running secure multi-account AWS environments, defined entirely as code Managing container platforms in the cloud and on-premises, with automated GitOps-style deployments Leading security reviews and hardening across the estate Owning monitoring, alerting and resilience, including regular backup and recovery testing Keeping cloud spend and capacity under control, and supporting compliance audits Handling incidents and coaching developers on secure delivery What You'll Bring A strong DevOps or SRE background, with recent hands-on AWS experience Deep Kubernetes experience, ideally including on-premises clusters, plus Helm Terraform, CI/CD pipelines and GitOps tooling, with Docker and Linux Experience managing artifact repositories and integrating single sign-on Scripting in Bash and Python or Go, and security testing built into pipelines Desirable: MLOps experience, Prometheus-style observability, security frameworks such as ISO 27001, active SC clearance What's On Offer Pension with employer contribution Private healthcare Generous holiday allowance Hybrid working, 2 days a week in the office Please note: You must be eligible for UK security clearance (BPSS and SC), which requires a UK passport and 5 years of continuous UK residency. Clearance can be sponsored for the right candidate. Apply today with your CV for this Senior DevOps Engineer role and we'll be in touch. This role may suit candidates who have held roles including: Senior Site Reliability Engineer, Cloud Platform Engineer, Senior AWS Engineer, DevSecOps Engineer, Kubernetes Engineer, Platform Engineer, Infrastructure Engineer Deerfoot Recruitment Solutions Ltd is a leading independent tech recruitment consultancy in the UK. For every CV sent to clients, we donate 1 to The Born Free Foundation. We are a Climate Action Workforce in partnership with Ecologi. If this role isn't right for you, explore our referral reward program with payouts at interview and placement milestones. Visit our website for details. Deerfoot Recruitment Solutions Ltd is acting as an Employment Agency in relation to this vacancy.
01/11/2026
Full time
Senior DevOps Engineer AWS / Kubernetes / Terraform / CI/CD / Infrastructure as Code Oxfordshire (Hybrid - 2 days a week in the office) 85,000 - 110,000 DOE Want to be the senior voice on infrastructure, with real say over how software reaches production? This Senior DevOps Engineer role is with a growing UK technology company building AI-led products for customers who work in high-stakes sectors. You'll be the most experienced platform engineer in a small team, with direct influence over the tools, standards and priorities the engineering group works to. It's a permanent role in Oxfordshire, hybrid, with 2 days a week in the office. What You'll Be Doing Designing and running secure multi-account AWS environments, defined entirely as code Managing container platforms in the cloud and on-premises, with automated GitOps-style deployments Leading security reviews and hardening across the estate Owning monitoring, alerting and resilience, including regular backup and recovery testing Keeping cloud spend and capacity under control, and supporting compliance audits Handling incidents and coaching developers on secure delivery What You'll Bring A strong DevOps or SRE background, with recent hands-on AWS experience Deep Kubernetes experience, ideally including on-premises clusters, plus Helm Terraform, CI/CD pipelines and GitOps tooling, with Docker and Linux Experience managing artifact repositories and integrating single sign-on Scripting in Bash and Python or Go, and security testing built into pipelines Desirable: MLOps experience, Prometheus-style observability, security frameworks such as ISO 27001, active SC clearance What's On Offer Pension with employer contribution Private healthcare Generous holiday allowance Hybrid working, 2 days a week in the office Please note: You must be eligible for UK security clearance (BPSS and SC), which requires a UK passport and 5 years of continuous UK residency. Clearance can be sponsored for the right candidate. Apply today with your CV for this Senior DevOps Engineer role and we'll be in touch. This role may suit candidates who have held roles including: Senior Site Reliability Engineer, Cloud Platform Engineer, Senior AWS Engineer, DevSecOps Engineer, Kubernetes Engineer, Platform Engineer, Infrastructure Engineer Deerfoot Recruitment Solutions Ltd is a leading independent tech recruitment consultancy in the UK. For every CV sent to clients, we donate 1 to The Born Free Foundation. We are a Climate Action Workforce in partnership with Ecologi. If this role isn't right for you, explore our referral reward program with payouts at interview and placement milestones. Visit our website for details. Deerfoot Recruitment Solutions Ltd is acting as an Employment Agency in relation to this vacancy.
DevOps Engineer Salary: 55,000- 65,000 DOE Working Arrangement: Hybrid - 2 days per week in the office (including Thursdays) Job Type: Permanent, Full-Time About the Opportunity We are recruiting for an experienced DevOps Engineer to join a growing infrastructure team within an established, technology-driven business. This is an exciting opportunity to take ownership of cloud-hosted infrastructure, automation, CI/CD pipelines and infrastructure security, working closely with Software Development and Technical Support teams. The successful candidate will join a collaborative and supportive environment, with a strong emphasis on technical best practices, continuous improvement and work-life balance. Key Responsibilities Maintain, develop and optimise Azure DevOps pipelines and CI/CD processes. Design, implement and manage cloud-hosted infrastructure using Terraform (Infrastructure as Code). Automate infrastructure provisioning, deployment and operational processes. Support business-as-usual (BAU) infrastructure activities, ensuring system reliability, security and performance. Work closely with Software Engineers to streamline deployment processes and improve development workflows. Take ownership of infrastructure responsibilities, reducing reliance on Software Development teams. Implement and maintain cybersecurity, technical governance and infrastructure controls. Identify opportunities to improve infrastructure efficiency, scalability and automation. Promote DevOps best practices across the wider technical function. Support containerised applications and cloud infrastructure environments. Essential Skills & Experience Proven experience working as a DevOps Engineer or in a similar infrastructure-focused role. Strong hands-on experience with Terraform and Infrastructure as Code (IaC) . Experience using Azure DevOps, Azure Pipelines and CI/CD . Solid understanding of cloud infrastructure management, deployment and maintenance. Experience supporting BAU infrastructure operations. Strong knowledge of DevOps methodologies, automation and infrastructure best practices. Ability to work independently, troubleshoot technical issues and take ownership of projects. Confident collaborating with Software Development and wider technical teams. Desirable Skills Strong experience with Microsoft Azure cloud environments. Knowledge of Kubernetes and containerisation technologies . Understanding of DevSecOps principles and cloud security. Familiarity with .NET applications and development environments. Experience implementing technical governance and cybersecurity controls. About You We are looking for a proactive, technically capable DevOps Engineer who can quickly become a valuable member of the team. You will be comfortable working autonomously, taking responsibility for infrastructure improvements and contributing to technical decisions. Strong communication skills, a collaborative approach and the ability to balance project delivery with operational support will be essential. Experience from any industry will be considered, provided you have the relevant technical expertise. What's on Offer? Salary of 55,000- 65,000 , depending on experience. Hybrid working - just 2 office days per week. Excellent work-life balance and flexibility. Additional company benefits (details to be confirmed). Collaborative, relaxed and supportive working environment. Opportunity to take ownership of key infrastructure projects. Work with modern cloud technologies, automation and DevOps practices. Join a growing team with opportunities to influence infrastructure strategy and technical improvements. Apply Now If you're an experienced DevOps Engineer with strong Terraform, Azure DevOps and CI/CD expertise, looking for a role offering technical ownership, flexibility and a positive team environment, we'd love to hear from you.
01/11/2026
Full time
DevOps Engineer Salary: 55,000- 65,000 DOE Working Arrangement: Hybrid - 2 days per week in the office (including Thursdays) Job Type: Permanent, Full-Time About the Opportunity We are recruiting for an experienced DevOps Engineer to join a growing infrastructure team within an established, technology-driven business. This is an exciting opportunity to take ownership of cloud-hosted infrastructure, automation, CI/CD pipelines and infrastructure security, working closely with Software Development and Technical Support teams. The successful candidate will join a collaborative and supportive environment, with a strong emphasis on technical best practices, continuous improvement and work-life balance. Key Responsibilities Maintain, develop and optimise Azure DevOps pipelines and CI/CD processes. Design, implement and manage cloud-hosted infrastructure using Terraform (Infrastructure as Code). Automate infrastructure provisioning, deployment and operational processes. Support business-as-usual (BAU) infrastructure activities, ensuring system reliability, security and performance. Work closely with Software Engineers to streamline deployment processes and improve development workflows. Take ownership of infrastructure responsibilities, reducing reliance on Software Development teams. Implement and maintain cybersecurity, technical governance and infrastructure controls. Identify opportunities to improve infrastructure efficiency, scalability and automation. Promote DevOps best practices across the wider technical function. Support containerised applications and cloud infrastructure environments. Essential Skills & Experience Proven experience working as a DevOps Engineer or in a similar infrastructure-focused role. Strong hands-on experience with Terraform and Infrastructure as Code (IaC) . Experience using Azure DevOps, Azure Pipelines and CI/CD . Solid understanding of cloud infrastructure management, deployment and maintenance. Experience supporting BAU infrastructure operations. Strong knowledge of DevOps methodologies, automation and infrastructure best practices. Ability to work independently, troubleshoot technical issues and take ownership of projects. Confident collaborating with Software Development and wider technical teams. Desirable Skills Strong experience with Microsoft Azure cloud environments. Knowledge of Kubernetes and containerisation technologies . Understanding of DevSecOps principles and cloud security. Familiarity with .NET applications and development environments. Experience implementing technical governance and cybersecurity controls. About You We are looking for a proactive, technically capable DevOps Engineer who can quickly become a valuable member of the team. You will be comfortable working autonomously, taking responsibility for infrastructure improvements and contributing to technical decisions. Strong communication skills, a collaborative approach and the ability to balance project delivery with operational support will be essential. Experience from any industry will be considered, provided you have the relevant technical expertise. What's on Offer? Salary of 55,000- 65,000 , depending on experience. Hybrid working - just 2 office days per week. Excellent work-life balance and flexibility. Additional company benefits (details to be confirmed). Collaborative, relaxed and supportive working environment. Opportunity to take ownership of key infrastructure projects. Work with modern cloud technologies, automation and DevOps practices. Join a growing team with opportunities to influence infrastructure strategy and technical improvements. Apply Now If you're an experienced DevOps Engineer with strong Terraform, Azure DevOps and CI/CD expertise, looking for a role offering technical ownership, flexibility and a positive team environment, we'd love to hear from you.
