DevSecOps

Senior DevSecOps Engineer
Development Cloud & Security

Your code goes into production. Your decisions shape the entire organisation.

A pipeline can do much more than turn green. It can make security part of everyday engineering make developers lives easier and build confidence in every release.

Thats the challenge.

At Nimber were looking for a Senior DevSecOps Engineer with deep technical expertise a questioning mindset and the drive to improve how software is built and delivered at scale.

Youll work where development cloud and security meet with Kubernetes and OpenShift at the centre. Reporting to the Head of DevSecOps youll combine technical leadership with hands-on engineering influencing architecture and turning decisions into working solutions.

What youll build and improve

• Security from the first design decision. Evolve the Secure SDLC embed threat modelling and secure coding into engineering practices and automate controls throughout development.
• Pipelines that teams can trust. Design secure CI/CD architectures build reusable frameworks and self-service capabilities and establish traceability from commit to production.
• Solid foundations for cloud-native delivery. Define patterns for Kubernetes OpenShift and Azure Red Hat OpenShift covering GitOps workload isolation identity networking secrets and security policies.
• Automation that scales. Build reusable Infrastructure as Code modules implement policy-as-code and make good engineering practices repeatable.
• Trust across the software supply chain. Integrate security testing prioritise vulnerabilities by risk and protect dependencies builds and artefacts through SBOMs signing and provenance verification.
• Better engineering with every release. Strengthen observability reliability and operational readiness measuring how changes improve security and delivery.
• Knowledge that travels. Mentor engineers and technical leads create practical standards and connect development platform cybersecurity architecture and risk teams.

The experience youll bring

• 10 years in Software Engineering Platform Engineering DevOps DevSecOps Cloud Engineering or Application Security.
• At least 5 years in each of these areas: designing and operating enterprise CI/CD platforms; working with Kubernetes and container platforms; and delivering cloud-native applications.
• Advanced expertise in Kubernetes OpenShift and ARO including enterprise OpenShift operations hardening RBAC networking storage and secrets management.
• Expert-level experience with Azure AWS and Google Cloud alongside cloud security architecture landing zones and multicloud governance. The role also covers Oracle Cloud.
• Strong experience with GitHub Enterprise GitHub Actions Azure DevOps and Jenkins embedding security release controls and automated validation into delivery pipelines.
• Strong knowledge of SSDLC OWASP Top 10 API security threat modelling and security testing including code dependency container secrets and IaC scanning.
• Experience with Infrastructure as Code and automation within an ecosystem that includes Terraform/OpenTofu Ansible and Azure Bicep.
• Proficiency in Python PowerShell and Bash as well as development with Go Java C# and JavaScript/TypeScript.
• A proven track record of leading enterprise DevSecOps transformations and working in highly regulated environments.

We also value

Experience in banking financial services insurance healthcare telecommunications or critical infrastructure.

Certifications such as CKA CKS Red Hat OpenShift/RHCA Azure Solutions Architect or DevOps Engineer AWS Solutions Architect Professional Google Professional Cloud Architect CISSP CSSLP CCSP or GIAC.

Your impact goes beyond the stack

We want to understand how you make decisions navigate trade-offs between security and productivity and help others do better work.

How you turn a security requirement into something teams can adopt. How you explain an architectural decision. How you take a good idea and make it work in production.

Does this sound like your kind of challenge

Send us your application and tell us one thing: what change have you made that helped teams deliver software more securely more simply or more reliably

At Nimber wed like to hear that story and what you want to build next.