DevSecOps

Senior DevSecOps Engineer
Development, Cloud & Security

Your code goes into production. Your decisions shape the entire organisation.

A pipeline can do much more than turn green. It can make security part of everyday engineering, make developers' lives easier and build confidence in every release.

That's the challenge.

At Nimber, we're looking for a Senior DevSecOps Engineer with deep technical expertise, a questioning mindset and the drive to improve how software is built and delivered at scale.

You'll work where development, cloud and security meet, with Kubernetes and OpenShift at the centre. Reporting to the Head of DevSecOps, you'll combine technical leadership with hands-on engineering, influencing architecture and turning decisions into working solutions.

What you'll build and improve

• Security from the first design decision. Evolve the Secure SDLC, embed threat modelling and secure coding into engineering practices, and automate controls throughout development.
• Pipelines that teams can trust. Design secure CI/CD architectures, build reusable frameworks and self-service capabilities, and establish traceability from commit to production.
• Solid foundations for cloud-native delivery. Define patterns for Kubernetes, OpenShift and Azure Red Hat OpenShift, covering GitOps, workload isolation, identity, networking, secrets and security policies.
• Automation that scales. Build reusable Infrastructure as Code modules, implement policy-as-code and make good engineering practices repeatable.
• Trust across the software supply chain. Integrate security testing, prioritise vulnerabilities by risk, and protect dependencies, builds and artefacts through SBOMs, signing and provenance verification.
• Better engineering with every release. Strengthen observability, reliability and operational readiness, measuring how changes improve security and delivery.
• Knowledge that travels. Mentor engineers and technical leads, create practical standards, and connect development, platform, cybersecurity, architecture and risk teams.

The experience you'll bring

• 10+ years in Software Engineering, Platform Engineering, DevOps, DevSecOps, Cloud Engineering or Application Security.
• At least 5 years in each of these areas: designing and operating enterprise CI/CD platforms; working with Kubernetes and container platforms; and delivering cloud-native applications.
• Advanced expertise in Kubernetes, OpenShift and ARO, including enterprise OpenShift operations, hardening, RBAC, networking, storage and secrets management.
• Expert-level experience with Azure, AWS and Google Cloud, alongside cloud security architecture, landing zones and multicloud governance. The role also covers Oracle Cloud.
• Strong experience with GitHub Enterprise, GitHub Actions, Azure DevOps and Jenkins, embedding security, release controls and automated validation into delivery pipelines.
• Strong knowledge of SSDLC, OWASP Top 10, API security, threat modelling and security testing, including code, dependency, container, secrets and IaC scanning.
• Experience with Infrastructure as Code and automation, within an ecosystem that includes Terraform/OpenTofu, Ansible and Azure Bicep.
• Proficiency in Python, PowerShell and Bash, as well as development with Go, Java, C# and JavaScript/TypeScript.
• A proven track record of leading enterprise DevSecOps transformations and working in highly regulated environments.

We also value

Experience in banking, financial services, insurance, healthcare, telecommunications or critical infrastructure.

Certifications such as CKA, CKS, Red Hat OpenShift/RHCA, Azure Solutions Architect or DevOps Engineer, AWS Solutions Architect Professional, Google Professional Cloud Architect, CISSP, CSSLP, CCSP or GIAC.

Your impact goes beyond the stack

We want to understand how you make decisions, navigate trade-offs between security and productivity, and help others do better work.

How you turn a security requirement into something teams can adopt. How you explain an architectural decision. How you take a good idea and make it work in production.

Does this sound like your kind of challenge?

Send us your application and tell us one thing: what change have you made that helped teams deliver software more securely, more simply or more reliably?

At Nimber, we'd like to hear that story and what you want to build next.