Devsecops jobs in SheffieldCreate job alerts

DEVOPS ENGINEER TRAINEESHIP \n \n Become a DevOps Engineer and Build Real-World Experience \n Are you interested in cloud computing, software development, automation, and building reliable technology platforms? Do you want to gain practical experience while developing technical skills that are in high demand across the technology industry? \n We are offering a DevOps Engineer Traineeship designed to help aspiring DevOps professionals develop industry-relevant knowledge through structured learning and practical projects. \n What You Will Learn \n Throughout the traineeship, you will develop an understanding of: \n\n • \n DevOps Fundamentals \n • \n Linux System Administration \n • \n Command Line and Shell Scripting \n • \n Version Control with Git \n • \n Software Development Lifecycle (SDLC) \n • \n Continuous Integration (CI) \n • \n Continuous Delivery and Continuous Deployment (CD) \n • \n Infrastructure as Code (IaC) \n • \n Containerisation with Docker \n • \n Container Orchestration \n • \n Cloud Computing Fundamentals \n • \n Cloud Platforms (AWS, Microsoft Azure and Google Cloud) \n • \n Configuration Management \n • \n Monitoring and Logging \n • \n Security Best Practices (DevSecOps) \n • \n Networking Fundamentals \n • \n Automation and Scripting \n • \n Incident Management and Reliability Engineering \n\n Practical Experience \n You will work on realistic DevOps projects that may include: \n\n • \n Building CI/CD pipelines \n • \n Deploying applications to cloud environments \n • \n Creating Infrastructure as Code templates \n • \n Managing Docker containers \n • \n Automating software deployment processes \n • \n Configuring monitoring and logging solutions \n • \n Implementing basic cloud infrastructure \n • \n Applying security best practices to deployment pipelines \n • \n Troubleshooting deployment and infrastructure issues \n • \n Portfolio projects demonstrating your DevOps capabilities \n\n This practical experience will help you develop a professional portfolio that demonstrates your capabilities to future employers. \n Ideal Candidate \n We are looking for individuals who: \n\n • \n Have an interest in technology, software development, and cloud computing \n • \n Enjoy solving technical problems \n • \n Have strong analytical and logical thinking skills \n • \n Pay close attention to detail \n • \n Are willing to learn new skills \n • \n Can work independently and manage their time effectively \n • \n Have basic computer skills \n\n No previous DevOps experience is required. Successful applicants will undertake our paid DevOps Engineer training programme before progressing into employment. The cost of the training is the responsibility of the learner, and full guidance and support will be provided throughout the programme. \n Benefits \n\n • \n Remote and flexible learning \n • \n Industry-relevant curriculum \n • \n Portfolio development opportunities \n • \n Practical project experience \n • \n Mentoring and personalised feedback \n • \n Career guidance and employability support \n • \n Opportunity to develop skills sought by modern employers \n\n Entry Requirements \n\n • \n A good level of written English \n • \n Access to a computer and internet connection \n • \n Motivation to learn and develop professionally \n\n Career Opportunities \n Upon successful completion, learners may pursue roles such as: \n\n • \n Junior DevOps Engineer \n • \n DevOps Engineer \n • \n Cloud Support Engineer \n • \n Platform Engineer \n • \n Infrastructure Engineer \n • \n Site Reliability Engineer (SRE) \n • \n Build and Release Engineer \n • \n Cloud Operations Engineer \n • \n Systems Administrator \n • \n Cloud Infrastructure Engineer \n\n Apply Today \n If you are looking to start a career in DevOps and want to gain practical experience while developing a professional portfolio, we would love to hear from you. \n Submit your application today and begin your journey towards a rewarding career in DevOps Engineering. \n We advertise this role across multiple UK locations — you only need to apply once and you'll be considered for all of them.

Overview: Own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supply‑chain integrity across teams. Core Responsibilities: Design and maintain Groovy pipeline steps (build, test, package, scan, deploy). Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container). Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch). Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling). Refactor legacy scripts (remove global state, consolidate hashing, standardize templates). Document ci-config.yaml standards and usage patterns. Mentor engineers on secure pipeline development and supply-chain practices. Troubleshoot and prevent pipeline incidents. Essential Skills: - 7+ years engineering; 3+ in CI/CD platform or DevSecOps. Ownership and collaborative mindsets, able to operate with minimal supervision. Advanced Python development experience - (best coding practises, APIs, JSON/YAML processing, tooling scripts) - should demonstrate key projects in CV Strong Jenkins + Groovy shared library expertise. Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata. Supply-chain security (SLSA, CycloneDX SBOM, digests). Experience with SonarQube, Sonatype IQ, container and SAST scanning. Proven performance tuning (caching, parallelization, dependency pruning). Compliance Awareness.Nice-to-Have Artifact signing / attestations (cosign, OCI). Terraform module and Helm chart publishing patterns. GitOps or release automation experience. GCP/AWS cloud experienceGCS is acting as an Employment Business in relation to this vacancy

The Role: Solution Designer Location: Sheffield, UK Position Type: Contract Inside IR35 Remote work option Available: 2-3 Days Onsite in a week Job Description: In this role, you will: Produce High Level Designs (HLDs) and Low Level Designs (LLDs) for identity capabilities. Define end-to-end Technical Solutions across business, application, data and infrastructure domains. Translate business, security and regulatory requirements into technical solutions. Develop reference architectures, patterns and design standards for the programme. Define integration patterns between identity platforms, applications and infrastructure. Design cloud-native solutions for GCP and Kubernetes environments. Define authentication, authorisation and federation architectures. Design Agent Identity, Human Identity and Workload Identity capabilities. Define Zero Trust security architecture and trust boundaries. Design API security, service-to-service authentication and workload authentication patterns. Develop event-driven integration architectures using messaging and asynchronous processing. Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code. Define secrets management, certificate lifecycle and PKI integration patterns. Design resilience, disaster recovery and high availability architectures. Ensure solutions meet non-functional requirements for security, scalability, resilience and performance. Produce architecture decision records (ADRs) and design documentation. Identify technical risks, assumptions, constraints and dependencies. Collaborate with Enterprise Architecture to ensure alignment with strategic architecture. Key Skills & Experience Essential Skills Enterprise Architecture Identity and Access Management (IAM) Authentication and Authorisation Zero Trust Architecture Agent Identity and Workload Identity Identity Federation (OIDC, OAuth2, SAML, SCIM) Cloud Architecture (GCP) Kubernetes and Service Mesh API Architecture and Security DevSecOps and CI/CD

A foundational background in software engineering or DevOps before moving into a dedicated security role: you understand how code is written, tested, and deployed, and that experience is central to how you approach security problems. You will work as the direct counterpart to our GRC-focused InfoSec

Some careers have more impact than others. If you're looking for further opportunities to develop your career, take the next step in fulfilling your potential right here at HSBC. HSBC is one of the largest banking and financial services organizations in the world, with operations in 58 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realize their ambitions. We are currently seeking an experienced professional to join our team in the role of Head of AppSec. The Opportunity We are seeking a modern, visionary, pragmatic, and collaborative Head of Application Security to transform our global AppSec function. Operating across multiple geographies, your mandate is to secure a vast, hybrid technology estate—ranging from core on-premises systems to modern cloud-native platforms—while actively tackling enterprise tech debt. In this highly influential matrixed leadership role, you will bridge the gap between engineering velocity and rigorous financial-grade security. Success requires seamless cross-functional orchestration across Cyber, CTO (Chief Technology Officer), CIO (Chief Information Officers in Global Businesses), and the CRO (Chief Risk Officer) organizations to embed security into the DNA of our software delivery lifecycle (SDLC). What you'll do Strategic & Modern AppSec Transformation Shift-Left at Scale: Evolve traditional gatekeeping security practices into a developer-empowered, automated or autonomous "DevSecOps" model that integrates seamlessly into continuous delivery pipelines. Tech Debt & Risk Navigation: Formulate pragmatic, risk-based strategies to remediate vulnerabilities across legacy on-premise architectures and modern cloud environments without stifling business innovation. Unified Tooling & Automation: Drive the strategy and implementation of modern Application Security Testing (AST) capabilities—including SAST, DAST, SCA, IAST, and Secrets Management—with high signal-to-noise ratios. Engineering Leadership: Truly bring an engineering mindset to problem solving and is not afraid to build in house, built with speed and purpose to learn, and think enterprise grade and demonstrates ambition in problem solving. Matrixed Collaboration & Stakeholder Management Cross-Functional Orchestration: Act as the central nexus between Cyber (threat intelligence and architecture), CTO/CIO (engineering, platform, and infrastructure delivery), and CRO (regulatory compliance and operational risk). Influence Without Authority: Navigate a complex matrixed organizational structure to align competing priorities, secure executive buy-in, and drive accountability across global engineering teams. Developer Advocacy: Build a culture of "security champions" by fostering trust, providing continuous feedback loops, and delivering actionable, developer-friendly remediation guidance. Think Enterprise: Thinks and builds for the enterprise. Anticipates interlocks and connects across functions within Cyber and in larger Tech organization and works to bridge and collaborate for impact. Governance, Risk, and Compliance (GRC) in a Global Bank Regulatory Alignment: Ensure the AppSec framework satisfies multi-jurisdictional compliance mandates (e.g., global central bank regulations, PCI-DSS, GDPR, regional data sovereignty laws). Quantitative Risk Reporting: Translate technical vulnerability data into executive-level risk metrics, communicating business impact clearly to the CRO and operational risk committees. Third-Party & Open-Source Risk: Establish robust controls for managing supply chain security, open-source software dependencies, and third-party vendor components. What you will need to succeed in the role Technical Leadership Deep Architectural Fluency: Hands-on background in software engineering or secure architecture, with comprehensive knowledge of both legacy on-premise infrastructure (mainframe, monolithic apps) and modern cloud environments (AWS, Azure, GCP, Kubernetes, Microservices). Modern AppSec Stack Mastery: Proven track record of scaling modern AppSec tooling, API security gateways, cloud-native application protection platforms (CNAPP), and automated vulnerability orchestration pipelines. Threat Modeling Expertise: Strong command of threat modeling methodologies (e.g., STRIDE, PASTA) tailored for complex, interconnected banking applications. Functional & Cultural Leadership Matrix Leadership in Scale: Experience in cybersecurity, with senior leadership role within a highly regulated, matrixed enterprise (ideally global financial services). Exceptional Communicator: Ability to fluently translate complex security metrics into business language for executive stakeholders (CIO, CTO, CRO) while maintaining technical credibility with elite engineering teams. Pragmatic Risk Mindset: An understanding that perfection is the enemy of progress in a legacy-heavy banking environment; ability to balance risk mitigation with business agility and speed-to-market. People Developer: Demonstrated success in building, mentoring, and inspiring globally distributed, high-performing engineering and security teams. Education & Certifications Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or a related field. Relevant industry certifications (e.g., CISSP, CISM, CSSLP, AWS/Azure Security Certifications) are preferred. You'll achieve more when you join HSBC. HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website. *Issued By HSBC Software Development (India) Limited* TPBN1_UKTJ

Sheffield based (2 days per week onsite) 6 Month contract £475 per day (inside IR35) We're currently supporting an organisation based Sheffield who require an experienced DevOps Consultant. This is an exciting opportunity to play a key role in designing, automating, and optimising cloud-native platforms within a highly regulated enterprise environment. Responsible for driving DevOps best practices, Infrastructure as Code, CI/CD automation, and Kubernetes-based deployments across Google Cloud, helping to deliver secure, scalable, and resilient solutions. • Design, build, and support scalable cloud-native platforms on Google Cloud (GCP)., • Develop and maintain Infrastructure as Code using Terraform, Ansible, and scripting languages., • Manage and optimise Kubernetes (GKE) environments, Docker containers, and Helm deployments., • Build, enhance, and maintain enterprise CI/CD pipelines using Jenkins and Git-based workflows., • Implement DevSecOps practices, integrating security and code quality tools into delivery pipelines., • Collaborate with engineering, infrastructure, and operations teams to improve platform reliability and automation., • Monitor and optimise platform performance using tools such as Datadog, Grafana, and AppDynamics., • Support hybrid cloud environments and ensure robust networking and security controls are in place., • Troubleshoot complex infrastructure, deployment, and pipeline-related issues., • Drive continuous improvement through automation, standardisation, and best practice adoption., • Strong hands-on experience with Google Cloud Platform (GCP), GKE, and Kubernetes., • Expertise in Docker, Helm Charts, and containerised deployments., • Proven experience with Terraform, Ansible, Python, Bash/Shell scripting, and Infrastructure as Code., • Strong knowledge of Jenkins CI/CD, Groovy pipelines, Git, and branching strategies., • Experience implementing DevSecOps tooling including SonarQube, Checkmarx, and container security scanning., • Solid Linux/Unix administration and troubleshooting skills., • Experience with monitoring and observability tools including Datadog, Grafana, and AppDynamics., • Knowledge of networking, firewalls, and enterprise DevOps operating models., • Experience supporting applications across hybrid and public cloud environments., • GCP, CKA, or CKAD certifications., • Experience with CloudSQL and Memorystore., • Knowledge of enterprise networking and API platforms., • SRE background and experience working within Agile delivery environments #J-18808-Ljbffr

LTM is looking for a QA Manager or QA Architect to join their team in Sheffield on a 6-month contract with the possibility of extension. The role involves defining departmental Testing Strategies, managing stakeholder relationships, and ensuring QA audit readiness. Candidates should have at least 6 years of QA experience, including 2 years in a leadership role, and familiarity with Agile and DevSecOps processes. Strong communication and data analysis skills are essential. #J-18808-Ljbffr

1 day ago Be among the first 25 applicants Get AI-powered advice on this job and more exclusive features. Direct message the job poster from HOK Consulting - Technical Recruitment Consultancy Job Title: Information Security Engineer – WAF & Threat Detection Location: Hybrid (x3 days from Sheffield) Visa: No sponsorship available and No PSW visa We're seeking a skilled Information Secuirty Engineer with strong WAF experience to enhance the efficacy and security posture of our Web Application Firewalls across multiple platforms. The role involves crafting custom WAF rules, performing in-depth log analysis, and driving tuning and optimization to reduce false positives and ensure robust protection. Key Responsibilities: • Develop, test, and implement custom WAF rules and tuning strategies, • Conduct efficacy testing and integrate results into CI/CD pipelines, • Perform detailed log analysis to identify and mitigate false positives, • Provide SME support on Web & API attack methods, evasions, and mitigations, • Support DevSecOps teams in automation and security pipeline integration, • Stay updated with evolving web threats and deliver security recommendations Ideal Background: • SOC / CSIRT / Threat Hunting or Security Forensics experience, • AppSec / Ethical Hacking expertise with knowledge of OWASP Top 10, • Hands-on experience with 3+ WAF vendors (e.g., AWS, Akamai, F5, GCP), • Security Engineering or DevSecOps experience is a plus, • Mid-Senior level, • Contract, • Information Technology, • Computer and Network Security, IT Services and IT Consulting, and IT System Custom Software Development Referrals increase your chances of interviewing at HOK Consulting - Technical Recruitment Consultancy by 2x We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI. #J-18808-Ljbffr

We're recruiting for an experienced Azure DevOps Engineer to join the Cybersecurity Product Sustained Engineering team of a leading global financial services organisation. This role offers the opportunity to work on enterprise-scale Azure environments, supporting cloud infrastructure, automation, CI/CD and Infrastructure as Code. You'll work closely with engineering, architecture, security and operations teams to deliver secure, reliable and scalable cloud solutions. • Design, build and maintain Azure infrastructure including Virtual Machines, Virtual Networks, subnets, private endpoints and Azure Storage., • Develop and maintain Infrastructure as Code using Terraform, Bicep and ARM templates., • Build and support CI/CD pipelines using Azure DevOps for infrastructure and application deployments., • Develop Python automation and Azure Functions to support cloud-based solutions., • Support Azure App Services and other custom-built applications across enterprise environments., • Implement monitoring, logging and diagnostics using Azure Monitor, Application Insights and Log Analytics., • Troubleshoot infrastructure, deployment and application issues and develop automated, scalable solutions., • Work closely with architects, developers, security teams and stakeholders to support and evolve the Azure platform., • Ensure cloud infrastructure and applications adhere to security, governance, compliance and regulatory standards., • Produce clear technical documentation, infrastructure configurations and operational procedures., • Contribute as a technical SME, providing guidance on cloud engineering, automation and infrastructure decisions., • Proven experience in a DevOps, Cloud Engineering, Platform Engineering or Infrastructure Engineering role., • Strong hands-on experience with Microsoft Azure in an enterprise environment., • Strong experience managing Azure Virtual Machines and Virtual Networks (VNets)., • Proven experience building and maintaining CI/CD pipelines, particularly using Azure DevOps., • Strong Terraform experience with Infrastructure as Code., • Hands-on programming or scripting experience using Python, PowerShell or Bash., • Experience with Azure Storage and core Azure infrastructure services., • Experience working within complex enterprise or data-centre environments., • Strong troubleshooting and problem-solving skills., • Excellent communication and stakeholder management skills., • Azure App Services and Azure Functions., • Azure Monitor, Application Insights and Log Analytics., • Bicep or ARM templates., • AWS or other cloud platform experience., • Cybersecurity or security engineering experience., • Azure OpenAI / LLM integrations., • Private Endpoints and advanced Azure networking., • Experience working within regulated or financial services environments., • Knowledge of cloud governance, security controls and DevSecOps practices. This is an excellent opportunity to join a high-performing engineering team supporting enterprise-scale Azure environments, with a strong focus on cloud infrastructure, automation, CI/CD, Infrastructure as Code and secure engineering practices. GCS is acting as an Employment Business in relation to this vacancy. #J-18808-Ljbffr

RWS is a global leader in content, translation, and intellectual property services. With more than 60 years of experience, RWS helps the world’s top brands grow by ensuring they are understood anywhere, in any language. The company combines proprietary technology with deep human expertise to deliver high-quality, compliant, and scalable solutions across industries such as life sciences, technology, finance, and legal. RWS is a global leader in content, translation, and intellectual property services. With more than 60 years of experience, RWS helps the world’s top brands grow by ensuring they are understood anywhere, in any language. The company combines proprietary technology with deep human expertise to deliver high-quality, compliant, and scalable solutions across industries such as life sciences, technology, finance, and legal. At RWS Group, we are evolving our Product & Technology (P&T) organization into a high-velocity, autonomous, and self-sustaining engineering ecosystem. As part of this journey, the Technology Enablement and Innovation team acts as the "Customer Success" engine for our developers, partnering across disciplines to ensure that doing the right thing is always the easiest thing. To support our modernization and drive for more efficiency, we are shifting from a downstream Quality Assurance gatekeeping model to an upstream Quality Engineering model. As the Head of Quality Engineering, you will lead this critical strategic and cultural engineering transformation. Guided by our core principle You Build It, You Run It, you will empower software engineers to take full, autonomous ownership of their code quality. You will build and lead a highly technical, matrixed community of Quality Engineers (QE). Your mission is to eliminate testing bottlenecks, align quality standards across distributed teams, and act as a consultant and trusted advisor to help product teams deliver stable, secure, and robust software with maximum velocity. • Quality Engineering Transformation: Design and execute a comprehensive Quality strategy that shifts testing left, ensuring quality is a design-time concern and an integral part of the development lifecycle, eliminating lengthy feedback cycles., • Testing Architecture: Establish and maintain modern, standardized end-to-end automation testing frameworks, tooling and local test-helper libraries appropriate for our diverse SaaS and on-premise products., • AI & Automation Scaling: Partner with teams to leverage emerging AI-assisted test generation tools to accelerate developer self-testing., • Product Alignment: align with the Product team to embed quality and reliability as key considerations in product design., • Security, Privacy and Data: Collaborate with the Security, Privacy and Data teams to ensure their policies and requirements are operationalized within the quality practices, framework and tooling., • Team Upskilling: Recruit, mentor, and manage a team of Quality Engineers who operate under a dual-reporting model (dotted-line to you, solid-line to their embedded engineering squads)., • Technical Consulting: Train QEs to act as senior consultants to engineering teams, educating teams on testing design and requirements, helping set up automation pipelines, and helping designing risk-based testing strategies before coding begins., • Community of Practice: Establish and champion a Quality Engineering Community of Practice to foster knowledge sharing, continuous learning, and technical alignment across RWS engineering teams., • Flow & DORA Metrics: Use DORA and Flow Metrics to systematically identify delivery bottlenecks and potential quality issues. Use these metrics to drive reporting on quality trends across the organization and target QE support., • Platform Integration: Work closely with the Platform Engineering and Technology Enablement teams to bake quality metrics, templates, and testing golden paths directly into the platform., • Engineering Credibility: 8+ years of experience in software engineering, CI/CD pipeline automation, or automated quality engineering., • Test Automation: Deep, hands-on experience with modern automation frameworks, contract testing, and performance/load testing tools., • DevSecOps & Platform Fluency: Strong understanding of modern CI/CD systems (e.g., GitHub Actions), containerization (Docker, Kubernetes), and cloud-native architectures (AWS/GCP), enabling you to integrate test automation seamlessly into developer pipelines., • Inspiring Change Agent: Proven track record of driving cultural transformations in software quality, shifting teams from manual verification to automated, developer-driven testing models., • Exceptional Communication: Strong influencing and coaching skills. You must be able to act as a trusted peer to Engineering Managers, helping them upskill their teams and maintain a high standard of practice., • Developer Empathy: A commitment to designing lightweight, friction-free quality guardrails that fit naturally into the modern developer's daily workflow, making "doing the right thing the easiest thing." If you like the idea of working with smart people who are passionate about growing the value of ideas, data and content by making sure organizations are understood , then you’ll love life at RWS. Our purpose is to unlock global understanding. This means our work fundamentally recognizes the value of every language and culture. So, we celebrate difference, we are inclusive and believe that diversity makes us strong. We want every employee to grow as an individual and excel in their career. In return, we expect all our people to live by the values that unite us: to partner, putting clients fist and winning together, to pioneer, innovating fearlessly and leading with vision and courage, to progress, aiming high and growing through actions and to deliver, owning the outcome and building trust with our colleagues and clients. RWS embraces DEI and promotes equal opportunity, we are an Equal Opportunity Employer and prohibit discrimination and harassment of any kind. RWS is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at RWS are based on business needs, job requirements and individual qualifications, without regard to race, religion, nationality, ethnicity, sex, age, disability, or sexual orientation. RWS will not tolerate discrimination based on any of these characteristics. Get the 3Ps right – Partner, Pioneer, Progress – and we´ll Deliver together as RWS. RWS Holdings PLC does not accept agency resumes. Please do not forward any unsolicited resumes to any RWS employees. Any unsolicited resume received will be treated as the property of RWS and Terms & Conditions associated with the use of such resume will be considered null and void. #J-18808-Ljbffr

Our technology teams work closely with the client's global businesses to help design and build digital services that allow our millions of customers around the world, to bank quickly, simply and securely. We also run and manage our IT infrastructure, data centers and core banking systems that power the world's leading international bank. Our multi-disciplined teams include DevOps engineers, IT architects, front and back-end developers, infrastructure specialists, cyber experts, as well as project and programme managers. Following extensive investment across our Technology and Digital domains and with plans for continued expansion throughout 2025 and beyond, we are currently seeking a QA Architect who will be able to define the Testing Strategy and standards across Cyber as part of a central Professional Testing Practise. This is a delivery-focused role with clear outcomes: you'll be accountable for defining and embedding Cyber-wide testing strategy, QA maturity assessment and an actionable remediation roadmap. Cybersecurity Technology & Engineering is responsible for fielding solutions that help defend the client against a wide range of threats to the business as well as its customers, clients, partners, and staff. The team works in concert, with partner teams across the client , to implement novel defensive capabilities that are effective and adaptable against a constantly evolving threat landscape. The function operates under the vision: "Enabling the client to be safely successful everywhere the Firm chooses to do business". The role will report to the Cyber QA Practice lead and will be responsible for supporting the establishment and development of Cyber's Professional Testing Practise, contributing to its strategic direction and helping to drive improvements across all facets of testing across Cyber. The role will involve working closely with a wide range of stakeholders including Cybersecurity project teams, Control Owners, and the business. The role is outcome-driven and will be measured on delivery of agreed artefacts and adoption across Cyber teams. Define and deliver, with guidance from the Cyber QA Practice Lead, the Testing Strategy, QA Maturity Framework and QA standards to be used across Cyber, including the frameworks, processes, methodologies and tooling that should be used and adopted by the Cyber teams. Lead on the Maturity Framework assessment and definition of the remediation plan needed to meet the agreed framework levels. This includes driving the adoption of automated test practices across Cyber and assisting teams in determining the correct level of performance and stress testing to be performed. This will cover both in-house developed applications and third-party applications that are supported and maintained by the Cyber teams. Provide support and assistance to the Cyber QA Practice Lead and help ensure their vision is effectively developed and implemented across the Cyber delivery teams. Define and deliver appropriate training for the Testing Practice members and QA professionals within the Cyber teams and monitor adoption and usage of QA tools within the existing environments. Provide standards and guidance for testing evidence suitable for audit review in our Regulated business environment and ensure that teams are following these guidelines and provide metrics and dashboards to support adoption tracking. Work with the Cyber QA Practice Lead to establish clear KPIs and OKRs for the Cyber QA Team, tracking delivery performance, quality improvements, and process efficiency. • Cyber Testing Strategy (incl. governance, tooling, metrics and adoption plan)., • QA Maturity Assessment report + remediation roadmap (priorities, milestones, ownership)., • Audit-ready testing evidence standards (templates, traceability expectations, minimum evidence set)., • KPIs/OKRs and dashboards to track quality, efficiency and adoption., • Proven experience defining and delivering departmental Testing Strategies and governance frameworks including best practices across multiple teams and regions, • Proven experience in aligning testing strategy with business goals. 6+ years of QA experience, 2+ years in a QA Manager or QA Architect Lead role;, • Proven experience supporting QA/audit readiness in regulated environments (evidence, traceability, controls), • Participation in internal/external QA audits or working with Control Owners / Risk & Compliance, • Relevant training/certifications (e.g. ISTQB Advanced/Test Manager, audit/quality governance courses), • Strong stakeholder management experience and the ability to influence and build partnership across Teams and Departments in order to conduct data analysis and present raw data in a simplified manner displaying trend analysis and highlighting outliers/exceptions;, • Familiar with Agile software development and DevSecOps delivery processes (burndown metrics, backlog tracking, velocity, task definition, retrospectives and defect management) and supporting tools, e.g., JIRA, Confluence, GIT, etc., • Good verbal and written communication skills in English, including experience of managing workshops and writing best practice documentation;, • Able to work in a fast-paced, team-focused environment with a proven track record of delivering and completing assigned tasks as an individual and as team;, • Demonstrates a strategic leadership, change management, continuous improvement mindset with a willingness to continuously learn and share learnings with others. All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply! If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website. #J-18808-Ljbffr

Undisclosed in Sheffield seeks a senior CI/CD engineer to own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers).You will deliver fast, secure, provenance-rich pipelines and strengthen supply‑chain integrity across teams

• Proven experience defining and delivering departmental Testing Strategies and governance frameworks including best practices across multiple teams and regions., • Proven experience in aligning testing strategy with business goals 6 years of QA experience 2 years in a QA Manager or QA Architect Lead role., • Proven experience supporting QA audit readiness in regulated environments evidence traceability controls., • Participation in internal & external QA audits or working with Control Owners Risk Compliance., • Relevant training certifications eg. ISTQB Advanced Test Manager audit quality governance courses., • Strong stakeholder management experience and the ability to influence and build partnership across Teams and Departments in order to conduct data analysis and present raw data in a simplified manner displaying trend analysis and highlighting outliers exceptions., • Familiar with Agile software development and DevSecOps delivery processes burndown metrics backlog tracking velocity task definition retrospectives and defect management and supporting tools eg JIRA Confluence GIT etc., • Good verbal and written communication skills in English including experience of managing workshops and writing best practice documentation., • Able to work in a fast paced team focused environment with a proven track record of delivering and completing assigned tasks as an individual and as team, • Demonstrates a strategic leadership change management continuous improvement mindset with a willingness to continuously learn and share learnings with others #J-18808-Ljbffr

• Produce High Level Designs (HLDs) and Low Level Designs (LLDs) for identity capabilities., • Define end-to-end Technical Solutions across business, application, data and infrastructure domains., • Translate business, security and regulatory requirements into technical solutions., • Develop reference architectures, patterns and design standards for the programme., • Define integration patterns between identity platforms, applications and infrastructure., • Design cloud-native solutions for GCP and Kubernetes environments., • Define authentication, authorisation and federation architectures., • Design Agent Identity, Human Identity and Workload Identity capabilities., • Define Zero Trust security architecture and trust boundaries., • Design API security, service-to-service authentication and workload authentication patterns., • Develop event-driven integration architectures using messaging and asynchronous processing., • Design Policy Decision Point (PDP) and Policy Enforcement Point (PEP) architectures using Policy-as-Code., • Define secrets management, certificate lifecycle and PKI integration patterns., • Design resilience, disaster recovery and high availability architectures., • Ensure solutions meet non-functional requirements for security, scalability, resilience and performance., • Produce architecture decision records (ADRs) and design documentation., • Support governance through Architecture Review Boards and Design Authorities., • Perform solution assurance and technical design reviews across supplier deliveries., • Identify technical risks, assumptions, constraints and dependencies., • Collaborate with Enterprise Architecture to ensure alignment with strategic architecture., • Work with Product Owners to refine technical requirements and delivery priorities., • Support engineering teams throughout implementation, testing and production readiness., • Mentor engineers and promote engineering best practice., • Evaluate new technologies and vendor products against programme requirements., • Contribute to roadmap planning and future-state architecture., • Enterprise Architecture, • Identity and Access Management (IAM), • Authentication and Authorisation, • Zero Trust Architecture, • Agent Identity and Workload Identity, • Identity Federation (OIDC, OAuth2, SAML, SCIM), • Cloud Architecture (GCP), • Kubernetes and Service Mesh, • API Architecture and Security, • Event-driven Architecture, • Policy-as-Code (OPA/Cedar), • PKI, Certificates and Secrets Management, • DevSecOps and CI/CD, • High Availability and Resilience Design, • Security Architecture, • Architecture Governance, • Stakeholder Management, • Technical Leadership #J-18808-Ljbffr

Overview: Own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supply‑chain integrity across teams. Core Responsibilities: • Design and maintain Groovy pipeline steps (build, test, package, scan, deploy)., • Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container)., • Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch)., • Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling)., • Refactor legacy scripts (remove global state, consolidate hashing, standardize templates)., • Document ci-config.yaml standards and usage patterns., • Mentor engineers on secure pipeline development and supply-chain practices., • Troubleshoot and prevent pipeline incidents. Essential Skills: • 7+ years engineering; 3+ in CI/CD platform or DevSecOps., • Ownership and collaborative mindsets, able to operate with minimal supervision., • Advanced Python development experience - (best coding practises, APIs, JSON/YAML processing, tooling scripts) - should demonstrate key projects in CV, • Strong Jenkins + Groovy shared library expertise., • Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata., • Supply-chain security (SLSA, CycloneDX SBOM, digests)., • Experience with SonarQube, Sonatype IQ, container and SAST scanning., • Proven performance tuning (caching, parallelization, dependency pruning)., • Compliance Awareness.Nice-to-Have, • Artifact signing / attestations (cosign, OCI)., • Terraform module and Helm chart publishing patterns., • GitOps or release automation experience., • GCP/AWS cloud experience #J-18808-Ljbffr

Own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supply‑chain integrity across teams. • Design and maintain Groovy pipeline steps (build, test, package, scan, deploy)., • Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container)., • Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch)., • Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling)., • Refactor legacy scripts (remove global state, consolidate hashing, standardize templates)., • Document ci-config.yaml standards and usage patterns., • Mentor engineers on secure pipeline development and supply-chain practices., • Troubleshoot and prevent pipeline incidents., • 7+ years engineering; 3+ in CI/CD platform or DevSecOps., • Ownership and collaborative mindsets, able to operate with minimal supervision., • Advanced Python development experience - (best coding practises, APIs, JSON/YAML processing, tooling scripts) - should demonstrate key projects in CV, • Strong Jenkins + Groovy shared library expertise., • Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata., • Supply-chain security (SLSA, CycloneDX SBOM, digests)., • Experience with SonarQube, Sonatype IQ, container and SAST scanning., • Proven performance tuning (caching, parallelization, dependency pruning)., • Compliance Awareness., • Artifact signing / attestations (cosign, OCI)., • Terraform module and Helm chart publishing patterns., • GitOps or release automation experience., • GCP/AWS cloud experience #J-18808-Ljbffr

Duration: contract to run until 30/11/2026 Location: Hybrid. Sheffield, 3 days onsite with additional need to travel to other offices within the UK Rate: up to £538.20 p/d Umbrellainside IR35 Own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supplychain integrity across teams. • Design and maintain Groovy pipeline steps (build, test, package, scan, deploy)., • Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container)., • Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch)., • Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling)., • Refactor legacy scripts (remove global state, consolidate hashing, standardize templates)., • Document ci-config.yaml standards and usage patterns., • Mentor engineers on secure pipeline development and supply-chain practices. Troubleshoot and prevent pipeline incidents., • 7+ years engineering; 3+ in CI/CD platform or DevSecOps., • Strong Jenkins + Groovy shared library expertise., • Advanced Python automation (JSON/YAML processing, tooling scripts)., • Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata., • Experience with SonarQube, Sonatype IQ, container and SAST scanning., • Proven performance tuning (caching, parallelization, dependency pruning). Compliance Awareness., • Terraform module and Helm chart publishing patterns., • GitOps or release automation experience., • Ownership mindset, able to operate with minimal supervision., • Current state assessment: audit shared library structure with view to understand all building blocks and modules support requests: work on user's reported issues to get to know critical parts of the pipeline and various configuration options. Identify bugs, classify them and develop hot fixes. feature requests: deliver 2 x small features/improvements to pipeline code. #J-18808-Ljbffr

Role Title: IAM Technical Lead Location: Sheffield (Hybrid - up to 3 days per week onsite) Role Category: Inside IR35 We're recruiting for an experienced Technical Lead to join the Identity & Access Management team of a leading global financial services organisation. This role offers the opportunity to play a key role in a major Next Generation IAM transformation programme, providing technical leadership across the design and delivery of secure, scalable and enterprise-grade identity services. • Own the technical solution and architecture for the IAM workstream., • Define and maintain High Level Designs (HLDs) and Low Level Designs (LLDs)., • Lead technical decision-making and technology selection., • Drive adoption of Zero Trust and identity-first design principles., • Provide technical leadership and mentoring to engineering teams., • Review solution designs, code and infrastructure changes., • Manage technical risks, assumptions, dependencies and integration activities., • Work closely with Architecture, Engineering, Security, Operations and third-party suppliers., • Support Agile delivery, planning, estimation and technical requirements., • Define and assure non-functional requirements including security, resilience, performance, scalability and observability., • Ensure solutions are production-ready and operationally supportable., • Champion DevSecOps, automation and continuous improvement., • Support architecture governance, design authorities and technical steering groups., • Strong experience in enterprise Identity & Access Management (IAM/IDAM)., • Proven experience as an IAM Technical Lead, IAM Architect, Identity Architect or similar., • Strong experience in solution architecture, HLDs and LLDs., • Experience delivering IAM transformation within complex enterprise environments., • Strong understanding of Authentication, Authorisation and Identity Lifecycle Management., • Experience with Agile delivery, requirements engineering and backlog management., • Strong stakeholder management and communication skills., • Experience working across Architecture, Engineering, Security and Operations teams., • Strong understanding of security, risk and compliance within enterprise environments., • Experience working within financial services or another regulated environment is highly desirable., • Human and Non-Human / Workload Identity., • Zero Trust Architecture., • Policy-as-Code., • Secrets Management., • Certificate Lifecycle Management., • API Security.Event-driven Identity Integration., • Cloud-native Security., • Observability, Monitoring and Audit., • Secure Software Development Lifecycle (SSDLC)., • DevSecOps and Automation., • Experience managing third-party technology partners and suppliers. This is an excellent opportunity to join a major Next Generation IAM transformation programme, providing technical leadership across enterprise identity architecture and delivering secure, scalable and modern identity capabilities within a global financial services environment. #J-18808-Ljbffr

Own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supplychain integrity across teams. • Design and maintain Groovy pipeline steps (build, test, package, scan, deploy)., • Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container)., • Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch)., • Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling)., • Refactor legacy scripts (remove global state, consolidate hashing, standardise templates)., • Document ci-config.yaml standards and usage patterns., • Mentor engineers on secure pipeline development and supply-chain practices., • Troubleshoot and prevent pipeline incidents., • 7+ years of engineering; 3+ years in CI/CD platform or DevSecOps., • Strong Jenkins + Groovy shared library expertise., • Advanced Python automation (JSON/YAML processing, tooling scripts)., • Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata., • Experience with SonarQube, Sonatype IQ, container and SAST scanning., • Proven performance tuning (caching, parallelization, dependency pruning)., • Compliance Awareness., • Terraform module and Helm chart publishing patterns., • GitOps or release automation experience. #J-18808-Ljbffr

Seeking an experienced senior engineer to own and optimize CI/CD, cloud infrastructure, and application performance. Focus on Python, Kubernetes workloads, and GCP platform reliability. This position is a contract position that will likely renew on a daily basis. It is hybrid working with 3 days in office with Office locations being either Sheffield, Birmingham, Edinburgh or London (Sheffield is preferred). Job Title: GCP DevOps Engineer Overview: Seeking an experienced senior engineer to own and optimize CI/CD, cloud infrastructure, and application performance. Focus on Python, Kubernetes workloads, and GCP platform reliability. This position is a contract position that will likely renew on a daily basis. It is hybrid working with 3 days in office with Office locations being either Sheffield, Birmingham, Edinburgh or London (Sheffield is preferred). • Diagnose and resolve performance issues across k8s clusters (networking, autoscaling, resource tuning)., • Design, implement, and maintain CI/CD pipelines (Jenkins, Tekton)., • Optimize build, test, and deployment workflows (artifact strategy, caching, security gates)., • Implement observability (logging, metrics, tracing) and performance dashboards., • Manage infrastructure-as-code (Terraform or equivalent) and environment provisioning in GCP., • Enforce DevSecOps best practices (image hardening, secrets management, SBOM, scanning)., • Support incident response, root cause analysis, and capacity planning., • Mentor engineering teams on pipeline usage and operational excellence., • Expert Kubernetes internals (scheduler, controllers, pod lifecycle, RBAC, networking, ingress, HPA/VPA)., • Expert GCP services (GKE, Cloud Build, Artifact Registry, Pub/Sub, Cloud Logging/Monitoring, IAM)., • Performance troubleshooting (CPU/memory profiling, latency analysis, concurrency tuning)., • Infrastructure-as-Code (Terraform modules, state management, policy enforcement)., • Observability stack (Prometheus, Grafana, OpenTelemetry, alert tuning)., • Strong Python (packages, virtual environments, dependency management, performance profiling)., • Strong Jenkins (shared libraries, pipelines-as-code) & Tekton (Tasks, Pipelines, Triggers)., • Containerization (Docker image optimization, multi-stage builds, runtime security)., • Git workflows (branching strategy, release tagging, code review automation)., • Compliance Awareness. Job Title: GCP DevOps Engineer Location: Sheffield, UK Rate/Salary: 450.00 - 500.00 GBP Daily Job Type: Contract Trading as TEKsystems. Allegis Group Limited, Maxis 2, Western Road, Bracknell, RG12 1RT, United Kingdom. No. 2876353. Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands. If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at en-gb/privacy-notices. To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go to en-gb/privacy-notices. We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice at en-gb/privacy-notices for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. If you are resident in the UK, EEA or Switzerland, we will process any access request you make in accordance with our commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield. #J-18808-Ljbffr

Location: Hybrid (x2 days from Sheffield) The Enterprise Security Architect will drive engineering excellence across DevSecOps, Cyber Security, embedding secure‑by‑design principles, standardisation, automation, and DevOps best practices. The role partners closely with Cyber Engineering, Architecture, and Product teams to deliver secure, scalable, and reusable security capabilities across the enterprise. • Drive engineering excellence across DevSecOps, Cyber, promoting standardisation, automation, and continuous improvement., • Embed security engineering best practices across teams, defining clear processes, tools, and patterns., • Define security requirements that meet regulatory controls while enabling usability and operational efficiency., • Design and promote standard build and deployment pipelines across Cyber Security., • Champion reuse‑first architecture, enabling “build once, use many times” solutions., • Strong DevSecOps and security engineering expertise, both hands‑on and at design level., • Background in Engineering, Computer Science, or a related technical discipline., • Experience leading engineering improvement initiatives in complex environments., • Strong understanding of secure systems engineering, architecture governance, and compliance. #J-18808-Ljbffr

The Cloud RTB WAF Engineer will work on the ECB Programme to deploy WAF solutions on all Bank domains and related names, covering internet-facing and internal web applications to meet regulatory requirements. Role is part of the Run The Bank team. Using the Agile framework, you will work closely with Global Business Teams for custom rules and exception handling, advise teams on false positive analysis and baseline policy updates. You will maintain communications with Vendor teams as well as the Bank Cloud Platform Leads. You will service existing and new requests for WAF, manage multiple requests, and coordinate with Change Teams and other stakeholders to ensure seamless implementation. DevSecOps support for maintaining automation pipelines and delivery work, identifying additional automation use cases for RTB to streamline processes. You will form key relationships with senior stakeholders from the Business, Cloud Teams, Compliance and Cyber, and work closely with Project Managers on early risk identification, status reporting, and escalation where required. • Work with the Run The Bank team and Global Business Teams for custom WAF rules and exception handling; perform false positive analysis and update baseline policies., • Maintain communications with Vendor teams and Bank Cloud Platform Leads; serve WAF requests and resolve service issues; coordinate with Change Teams and other stakeholders for seamless implementation., • Provide DevSecOps support for automation pipelines and identify additional automation use cases to streamline processes., • Engage with senior stakeholders across Business, Cloud, Compliance and Cyber; provide risk identification, status reporting and escalation as needed., • Extensive experience with Web Application Security log analysis, from a Cyber SOC/CSIRT background, aiming to become a WAF Engineering SME across CN WAF (AWS, Azure, GCP, Modsec) and Multi-Vendor WAF products (F5, Akamai, etc.)., • Strong experience with multiple WAF solutions for edge, cloud, and on-premises., • Strong experience with cloud services and their WAF controls (AWS, Azure, GCP)., • Strong understanding of web application security attack methods and mitigations., • Proficiency in WAF tuning and configuration with a solid foundation in web security principles., • Develop custom WAF rules and features to address gaps and enhance security., • Design and implement bespoke WAF processes and documentation with a thorough understanding of web security., • Analytical skills to align platforms with MVP and Baseline Configurations, leveraging deep knowledge of WAF functionalities., • Provide DevSecOps pipeline maintenance support for automation work., • Familiarity with IDAM protocols and access control for WAF management, backed by web security knowledge., • Understanding of HTTPS inspection, termination and certificate management., • Experience with rate limiting techniques and integration into security configs., • Experience with version control and update mechanisms for WAF solutions., • Ability to document platform and organizational logging options with security implications in cloud environments., • Experience interfacing with SOC during WAF-related security incidents., • General connectivity, network issue management and service management experience., • Attention to detail when analysing large data sets., • Excellent interpersonal and communication skills (written and verbal)., • Experience working in Agile or knowledge of its principles., • Experience on Information Security / Cyber Security / IT Security projects and Infrastructure projects is desirable. Kind Regards -- Senior Delivery Consultant Office: Email: • Mid-Senior level, • Contract, • Industries: Banking Referrals increase your chances of interviewing at Vallum Associates by 2x Location: Sheffield, England, United Kingdom Posted: 1 month ago #J-18808-Ljbffr

They are undergoing a transformation of its Identity and Access Management practices including the delivery of a set of net new tools to overhaul how IAM is carried out in the industry. We are seeking experienced and dynamic DevOps Engineers who have a good understanding of cloud platforms and Identity Management including AWS, GCP and Azure, with a successful track record of working in complex global organisations at fast pace. The role will report to the Lead Architects and be part of a dynamic and highly skilled team. In this role, you will: Design, build, and maintain CI/CD. The DevOps Engineer will play a key role in delivering and operating enterprise Identity & Access Management (IAM) capabilities. This role is responsible for automating deployment, configuration, and lifecycle management of IAM platforms and integrations. The engineer will build and maintain CI/CD pipelines, implement infrastructure as code, and ensure secure, scalable, and reliable IAM services across the organisation. The position works closely with IAM architects, security engineers, platform teams, and application owners to support and deploy both cloud and on-prem IAM solutions. • pipelines for IAM components, policies, connectors, microservices, and integrations., • Enable automated testing, security scanning, and controlled deployments across DEV/TEST/PROD environments., • Implement continuous improvement to streamline IAM release processes., • Develop and maintain IaC (Terraform, Ansible for deploying IAM infrastructure, identity policies, directories, and supporting platforms., • Ensure consistent, repeatable environments and compliance with architectural standards., • Develop scripts and automation for account lifecycle operations, access provisioning, and system integrations., • Build and maintain CI/CD pipelines for .NET and configuration-based deployments (e.g., Azure DevOps/GitHub Actions/Jenkins)., • Automate environment provisioning and configuration using Infrastructure as Code (e.g., Terraform, ARM/Bicep) and configuration management (e.g., Ansible, DSC)., • Implement automated deployment patterns for IAM components:, • MIM rules extensions / services, • Scheduled jobs and supporting utilities, • Database changes (versioned SQL scripts, DACPAC where appropriate), • Support secure delivery practices: secrets management, least privilege, vulnerability remediation, and audit-ready controls., • Collaborate with L2/L3 teams to convert recurring incidents into automation and permanent fixes., • Embed security into the build and deployment process, including vulnerability scanning, secrets detection, and code quality checks., • Work with cybersecurity teams to ensure compliance with Zero Trust principles and IAM security policies., • Collaborate with IAM architects, security teams, and application owners on design and integration requirements., • Create and maintain documentation for pipelines, IaC, deployment patterns, and operational processes., • Infrastructure as code (Terraform & GCP Provisioning) Terraform core, GCP Infra, Policy as code, develop the capability to manage, maintain and write policies,, • Proven experience in a DevOps / SRE / Platform Engineering role supporting enterprise applications., • Strong hands‑on experience with CI/CD and source control (Git), including release pipelines and environment promotion., • Working knowledge of .NET build/release processes and dependency management., • Strong SQL Server experience for deployment automation and troubleshooting (schema changes, performance awareness)., • Strong experience with Visual Studio (2019/2022): building and troubleshooting solutions, MSBuild, test runners, • Scripting skills (PowerShell strongly preferred; Python desirable)., • Experience implementing monitoring/alerting and operational runbooks., • DevSecOps & platform security, security scanning, IAM and identity, network security, compliance, • Release engineering and governance, release ops, change management, documentation, • Regionalisation and compliance, regional deployments and failover, data residency, conditional access, • Experience with tools like GitHub, Jenkins, Ansible, Nexus, • Strong problem‑solving and troubleshooting capabilities., • Ability to work collaboratively across security, engineering, and operations teams., • Excellent communication and documentation skills., • Experience working in Agile/Scrum environments., • Experience of Privileged Access Management and identity access management, • Understanding and experience of technologies deployed at a large scale in a global IT enterprise, • Experience of working in an Agile team – managing workload in Jira and engagements in Jira Service Desk, • Ability to adapt and understand new technologies – being self‑motivated to learn, • Strong interpersonal, influencing, communication and report‑writing skills, • Ability to interact appropriately with users of various technical skill levels, • Ability to work in a multi country, culturally diverse and time‑zone separated role. #J-18808-Ljbffr

Role: Testing Strategy & QA Governance Consultant (Cyber) Location: Sheffield, UK (Hybrid role, require 2-3 days a week onsite) Big Bank Funding. FinTech Thinking Our technology teams work closely with HSBC’s global businesses to help design and build digital services that allow our millions of customers around the world, to bank quickly, simply and securely. We also run and manage our IT infrastructure, data centres and core banking systems that power the world’s leading international bank. Our multi-disciplined teams include DevOps engineers, IT architects, front and back-end developers, infrastructure specialists, cyber experts, as well as project and programme managers. Following extensive investment across our Technology and Digital domains and with plans for continued expansion throughout 2025 and beyond, we are currently seeking a QA Architect who will be able to define the Testing Strategy and standards across Cyber as part of a central Professional Testing Practise. This is a delivery-focused role with clear outcomes: you’ll be accountable for defining and embedding Cyber-wide testing strategy, QA maturity assessment and an actionable remediation roadmap. Cybersecurity Technology & Engineering is responsible for fielding solutions that help defend HSBC against a wide range of threats to the business as well as its customers, clients, partners, and staff. The team works in concert, with partner teams across HSBC, to implement novel defensive capabilities that are effective and adaptable against a constantly evolving threat landscape. The function operates under the vision: “Enabling HSBC to be safely successful everywhere the Firm chooses to do business”. The role will report to the Cyber QA Practice lead and will be responsible for supporting the establishment and development of Cyber's Professional Testing Practise, contributing to its strategic direction and helping to drive improvements across all facets of testing across Cyber. The role will involve working closely with a wide range of stakeholders including Cybersecurity project teams, Control Owners, and the business. The role is outcome-driven and will be measured on delivery of agreed artefacts and adoption across Cyber teams. The role will: • Define and deliver, with guidance from the Cyber QA Practice Lead, the Testing Strategy, QA Maturity Framework and QA standards to be used across Cyber, including the frameworks, processes, methodologies and tooling that should be used and adopted by the Cyber teams., • Lead on the Maturity Framework assessment and definition of the remediation plan needed to meet the agreed framework levels. This includes driving the adoption of automated test practices across Cyber and assisting teams in determining the correct level of performance and stress testing to be performed. This will cover both in-house developed applications and third-party applications that are supported and maintained by the Cyber teams., • Provide support and assistance to the Cyber QA Practice Lead and help ensure their vision is effectively developed and implemented across the Cyber delivery teams., • Define and deliver appropriate training for the Testing Practice members and QA professionals within the Cyber teams and monitor adoption and usage of QA tools within the existing environments., • Provide standards and guidance for testing evidence suitable for audit review in our Regulated business environment and ensure that teams are following these guidelines and provide metrics and dashboards to support adoption tracking., • Work with the Cyber QA Practice Lead to establish clear KPIs and OKRs for the Cyber QA Team, tracking delivery performance, quality improvements, and process efficiency., • Cyber Testing Strategy (incl. governance, tooling, metrics and adoption plan)., • QA Maturity Assessment report + remediation roadmap (priorities, milestones, ownership)., • Audit-ready testing evidence standards (templates, traceability expectations, minimum evidence set)., • KPIs/OKRs and dashboards to track quality, efficiency and adoption., • Proven experience defining and delivering departmental Testing Strategies and governance frameworks including best practices across multiple teams and regions, • Proven experience in aligning testing strategy with business goals. 6+ years of QA experience, 2+ years in a QA Manager or QA Architect Lead role;, • Proven experience supporting QA/audit readiness in regulated environments (evidence, traceability, controls), • Participation in internal/external QA audits or working with Control Owners / Risk & Compliance, • Relevant training/certifications (e.g. ISTQB Advanced/Test Manager, audit/quality governance courses), • Strong stakeholder management experience and the ability to influence and build partnership across Teams and Departments in order to conduct data analysis and present raw data in a simplified manner displaying trend analysis and highlighting outliers/exceptions;, • Familiar with Agile software development and DevSecOps delivery processes (burndown metrics, backlog tracking, velocity, task definition, retrospectives and defect management) and supporting tools, e.g., JIRA, Confluence, GIT, etc., • Good verbal and written communication skills in English, including experience of managing workshops and writing best practice documentation;, • Able to work in a fast-paced, team-focused environment with a proven track record of delivering and completing assigned tasks as an individual and as team;, • Demonstrates a strategic leadership, change management, continuous improvement mindset with a willingness to continuously learn and share learnings with others. As a business operating in markets all around the world, we believe diversity brings benefits for our customers, our business and our people. This is why HSBC UK is committed to being an inclusive employer and encourages applications from all suitably qualified applicants irrespective of background, circumstances, age, disability, gender identity, ethnicity, religion or belief and sexual orientation. We want everyone to be able to fulfil their potential which is why we provide a range of flexible working arrangements and family friendly policies. As an HSBC employee in the UK, you will have access to tailored professional development opportunities and a competitive pay and benefits package. This includes private healthcare for all UK-based employees, enhanced maternity and adoption pay and support when you return to work, and a contributory pension scheme with a generous employer contribution. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website. #J-18808-Ljbffr

Our technology teams work closely with CLIENT ’s global businesses to help design and build digital services that allow our millions of customers around the world, to bank quickly, simply and securely. We also run and manage our IT infrastructure, data centres and core banking systems that power the world’s leading international bank. Our multi-disciplined teams include DevOps engineers, IT architects, front and back-end developers, infrastructure specialists, cyber experts, as well as project and programme managers. Following extensive investment across our Technology and Digital domains and with plans for continued expansion throughout 202 6 and beyond, we are currently seeking a Lead Enterprise Engineer / Architect to assist in the development of a n Engineering Excellence Practi c e. Cybersecurity Technology & Engineering is responsible for fielding solutions that help defend CLIENT against a wide range of threats to the business as well as its customers, clients, partners, and staff. The team works in concert, with partner teams across CLIENT , to implement novel defensive capabilities that are effective and adaptable against a constantly evolving threat landscape. The function operates under the vision: “Enabling CLIENT to be safely successful everywhere the Firm chooses to do business”. We are a team of multi skilled engineers / architects who design and build integration solutions for Cyber services across CLIENT . Ou r overall aim s are to improve the security of the bank by removing friction from the cyber services engineers consume , and to improve how Cyber engineers its own services . This includes working with teams to improve their DevSecOps practices, pipeline integration with cyber services, and working with the Principal Engineering community across the bank to run POC’s for improvements to existing services, or development of new services and features. This can require small optimisations or complete reimagining of the solution, and the way we achieve the overall outcomes. In addition to direct involvement with engineering teams across the bank we are also driving the adoption of engineering best practice across Cyber and are establishing an E ngineering E xcellence practice . We require an experienced engineer who has worked in high performing teams and has a broad knowledge, not just hands on development but also organisationally and has a proven track record in driving automation, efficiency quality and continuous improvement. This is an engineering led initiative by engineers for engineers looking at how to mature and improve engineer ing practice both within individual engineering teams and horizontally across cyber . Assist in establishing the engineering excellence program across Cyber, b uild ing a community of practice to drive consistency standardisation and a culture of automation and continuous improvement across teams . E mbed engineering efficiency , improvement and engineering best practice across cyber with clarity on process, system and tools . Partnering with the Engineering leads and capability owners to ensure desired outcomes are achieved. Work with the engineering teams in setting requirements that develop services and capabilities that meet the control s needed but also appeal to a broad customer base and enable operational efficiency throughout our value stream . #J-18808-Ljbffr

Sheffield, United Kingdom | Posted on 07/31/2026 Role: TestingStrategy & QA Governance Consultant (Cyber) Location: Sheffield, UK (Hybrid role, require 2-3 days a week onsite) Big Bank Funding. FinTech Thinking Our technology teams work closely withHSBC's global businesses to help design and build digital services that allowour millions of customers around the world, to bank quickly, simply andsecurely. We also run and manage our IT infrastructure, data centres and corebanking systems that power the world's leading international bank. Our multi-disciplined teams include DevOpsengineers, IT architects, front and back-end developers, infrastructurespecialists, cyber experts, as well as project and programmemanagers. Following extensive investment across ourTechnology and Digital domains and with plans for continued expansionthroughout 2025 and beyond, we are currently seeking a QA Architect who will beable to define the Testing Strategy and standards across Cyber as part of acentral Professional Testing Practise. This is a delivery-focused rolewith clear outcomes: you’ll be accountable for defining and embeddingCyber-wide testing strategy, QA maturity assessment and an actionableremediation roadmap. Cybersecurity Technology & Engineeringis responsible for fielding solutions that help defend HSBC against a widerange of threats to the business as well as its customers, clients, partners,and staff. The team works in concert, with partner teams across HSBC, toimplement novel defensive capabilities that are effective and adaptable againsta constantly evolving threat landscape. The function operates under thevision: "Enabling HSBC to be safely successful everywhere the Firm chooses todo business". • Define and deliver, with guidance from theCyber QA Practice Lead, the Testing Strategy, QA Maturity Framework and QA standards to be used across Cyber, including the frameworks, processes, methodologiesand tooling that should be used and adopted by the Cyber teams., • Lead on the Maturity Framework assessment and definition of the remediation plan needed to meet the agreed framework levels. This includes driving the adoption of automated test practicesacross Cyber and assisting teams in determining the correct level ofperformance and stress testing to be performed. This will cover both in-housedeveloped applications and third-party applications that are supported andmaintained by the Cyber teams., • Provide support and assistance to the Cyber QA Practice Lead and help ensure their vision is effectively developed and implemented across the Cyber delivery teams., • Define and deliver appropriate training for the Testing Practice members and QA professionals within the Cyber teams and monitor adoption and usage of QA tools within the existing environments., • Provide standards and guidance for testing evidence suitable for audit review in our Regulated business environment and ensure that teams are following these guidelines and provide metrics and dashboards to support adoption tracking., • Work with the Cyber QA Practice Lead to establish clear KPIs and OKRs for the Cyber QA Team, tracking delivery performance, quality improvements, and process efficiency., • CyberTesting Strategy (incl. governance, tooling, metrics and adoption plan)., • QAMaturity Assessment report + remediation roadmap (priorities, milestones, ownership)., • Audit-readytesting evidence standards (templates, traceability expectations, minimum evidence set)., • KPIs/OKRs and dashboards to track quality, efficiency and adoption., • Proven experience defining and delivering departmental TestingStrategies and governance frameworks including best practices acrossmultiple teams and regions, • Proven experience in aligning testing strategy with business goals. 6+ years ofQA experience, 2+ years in a QA Manager or QA Architect Lead role;, • Proven experience supporting QA/audit readiness in regulatedenvironments (evidence, traceability, controls), • Participation in internal/external QA audits or working with Control Owners / Risk &Compliance, • Relevanttraining/certifications (e.g. ISTQB Advanced/Test Manager, audit/qualitygovernance courses), • Strongstakeholder management experience and the ability to influence and build partnership across Teams and Departments in order to conduct data analysis and present raw data in a simplified manner displaying trend analysis and highlighting outliers/exceptions;, • Familiar with Agile software development and DevSecOps delivery processes (burndown metrics, backlog tracking, velocity, task definition, retrospectives and defect management) and supporting tools, e.g., JIRA, Confluence, GIT, etc., • Good verbal and written communications skills in English, including experience of managing workshops and writing best practice documentation;, • Able to work in a fast-paced, team-focused environment with a proven track record of delivering and completing assigned tasks as an individual and as team;, • Demonstrates a strategic leadership, change management, continuous improvement mindset with a willingness to continuously learn and share learnings with others. As a business operating in markets all around the world, we believe diversity brings benefits for our customers, our business and our people. This is why HSBC UK is committed to being an inclusive employer and encourages applications from all suitably qualified applicants irrespective of background, circumstances, age, disability, gender identity, ethnicity, religion or belief and sexual orientation. We want everyone to be able to fulfil their potential which is why we provide a range of flexible working arrangements and family friendly policies. As an HSBC employee in the UK, you will have access to tailored professional development opportunities and a competitive pay and benefits package. This includes private healthcare for all UK-based employees, enhanced maternity and adoption pay and support when you return to work, and a contributory pension scheme with a generous employer contribution. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website. #J-18808-Ljbffr

• Own the technical solution architecture for the assigned IAM workstream, • Define maintain and govern HighLevel Designs HLDs and LowLevel Designs LLDs, • Lead technical decisionmaking architecture reviews and technology selection activities, • Ensure alignment with enterprise architecture security standards and regulatory requirements, • Drive adoption of Zero Trust and Identityfirst architecture principles, • Provide technical leadership guidance and mentoring to engineering teams, • Review solution designs application code and infrastructure changes, • Manage technical risks assumptions dependencies and integration challenges, • Coordinate technical activities across internal teams and thirdparty suppliers, • Support planning estimation solution delivery and implementation activities, • Define and validate nonfunctional requirements including availability resilience performance scalability observability and security, • Ensure solutions are productionready supportable and operationally compliant, • Participate in architecture governance forums design authorities and technical steering committees, • Promote engineering excellence DevSecOps practices and continuous improvement initiatives, • Collaborate with Architecture Engineering Security Operations and business stakeholders To be successful in this role you should have: • Strong technical leadership and solution architecture experience, • Knowledge of Enterprise Identity and Access Management IAM, • Experience with Authentication Authorization and Identity Lifecycle Management, • Understanding of Human Identity NonHuman Identity Agent Identity and Workload Identity, • Strong knowledge of Zero Trust Architecture principles, • Experience with PolicyasCode and security governance practices, • Knowledge of Secrets Management and Certificate Lifecycle Management, • Experience securing APIs and implementing API Security controls, • Understanding of EventDriven Architectures and Identity Integrations, • Knowledge of CloudNative Security and modern cloud platforms, • Experience with Observability Monitoring Logging and Auditing solutions, • Strong understanding of Secure Software Development Lifecycle SSDLC, • Experience with DevSecOps Automation and Production Readiness practices, • Strong Stakeholder Management Communication and Facilitation skills, • Experience working in regulated Financial Services environments, • Ability to lead crossfunctional teams across Architecture Engineering Security Operations and external suppliers Mandatory Skills : Technical Leadership, Solution Architecture, Identity & Access Management (IAM), Zero Trust Architecture, Authentication, Authorization, DevSecOps, SSDLC, Stakeholder Management, Enterprise Architecture #J-18808-Ljbffr

• Develop and maintain cloudnative identity services and platform components, • Build APIs microservices and eventdriven integrations, • Implement features aligned with engineering standards and solution designs, • Develop secure integrations with enterprise identity platforms and thirdparty services, • Implement authentication authorization and identity federation capabilities, • Support Human Identity Agent Identity and Workload Identity solutions, • Develop and maintain PolicyasCode integrations and authorization services, • Build and support Infrastructure as Code IaC implementations where required, • Participate in design reviews and peer code reviews, • Troubleshoot and resolve application platform and integration issues, • Support deployments across development testing and production environments, • Produce technical documentation operational procedures and runbooks, • Ensure solutions meet security performance scalability and resilience requirements, • Collaborate with Platform Engineers Security Engineers Architects and Product Owners, • Contribute to CICD pipelines and deployment automation initiatives, • Support monitoring logging and observability capabilities, • Participate in Agile delivery ceremonies and team activities, • Identify automation opportunities and continuous improvement initiatives, • Support production incidents and problem management activities, • Maintain awareness of emerging technologies and engineering best practices To be successful in this role you should have: • Strong Software Engineering experience, • Experience in CloudNative Application Development, • Strong API Development and REST API expertise, • Experience designing and developing Microservices architectures, • Knowledge of EventDriven Architecture patterns, • Handson experience with Kubernetes, • Experience with Gitbased source control, • Experience implementing and supporting CICD pipelines, • Knowledge of Infrastructure as Code principles and tools, • Understanding of DevSecOps practices, • Experience with Identity Standards such as OAuth2 OIDC SAML and SCIM, • Knowledge of Secure Coding Practices, • Experience with Software Testing and Automation, • Strong troubleshooting and problemsolving abilities, • Excellent collaboration and communication skills, • Ability to work effectively in complex enterprise environments Mandatory Skills : Software Engineering, Cloud-Native Development, API Development, Microservices, Kubernetes, CI/CD, DevSecOps, Identity & Access Management (IAM), OAuth2/OIDC, REST APIs #J-18808-Ljbffr

• Infrastructure as Code (IaC), CI/CD, monitoring, and system reliability, • Strong understanding of enterprise environments, controls, and compliance requirements, • Ability to manage work and deliverables independently, • Ability to support GenAI-enabled engineering practices (e.g., AI-assisted development/operations) while adhering to enterprise governance, security, and risk controls, • Design, implement, and maintain CI/CD pipelines (e.g., Jenkins), • Automate infrastructure provisioning and configuration (e.g., Ansible, Terraform), • Ensure high availability, scalability, and security of systems, • Collaborate with developers, QA, and IT operations to streamline releases, • Troubleshoot deployment, build, and infrastructure issues, • Maintain configuration management tools (Ansible), • Ensure compliance with enterprise controls and regulatory requirements, • Work independently to deliver on assigned tasks and projects, • Utilize Jira and Confluence for work tracking and documentation, • Enable and operationalise GenAI/LLM-based tooling in the DevOps toolchain (where approved), including secure access, environment configuration, and integration into CI/CD workflows, • Implement guardrails for GenAI usage (e.g., data handling, prompt/content logging where required, secrets protection, model/tool access controls) aligned to enterprise policies, • Support reliability and observability for GenAI-enabled services (e.g., monitoring latency, error rates, cost/usage, and drift/quality signals where applicable), • Scripting/Programming: Bash, Python, Shell, • Infrastructure as Code: Ansible, Terraform, • Source Control: Git, Bitbucket, • Security & Compliance: Understanding of DevSecOps, secrets management, enterprise controls, and compliance, • Familiarity with Jira and Confluence, • GenAI/LLM Fundamentals: Understanding of LLM concepts (prompting, embeddings, RAG, model limitations), and how to apply them safely in engineering workflows, • GenAI Tooling & Integration: Experience using and integrating GenAI-assisted tools (e.g., code assistants, chat-based ops assistants) and/or APIs into developer/DevOps workflows, • Responsible AI & Data Handling: Awareness of privacy, IP, data classification, and secure usage patterns when working with GenAI tools in enterprise environments, • Experience supporting GenAI platforms/services in production (e.g., model/API deployment patterns, prompt/version management, evaluation/monitoring, and cost controls) #J-18808-Ljbffr

A leading consulting firm is seeking a Cloud RTB WAF Engineer to work on deploying WAF solutions across all domains. The ideal candidate will have extensive experience in Web Application Security, proficiency in WAF tuning, and strong analytical skills. This role requires collaboration with various teams to ensure security implementations align with organizational standards. It’s an exciting opportunity for those passionate about Cyber Security in a dynamic environment. #J-18808-Ljbffr

GCS Recruitment seeks an experienced Senior DevSecOps Engineer to own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform). You will deliver fast, secure pipelines with provenance-rich SBOMs and digests across teams. You will design Groovy pipeline steps, extend Python tooling for SLSA provenance, optimize performance, ensure artifact integrity, refactor legacy scripts, document standards, and mentor engineers on secure pipeline #J-18808-Ljbffr

GCS in Sheffield seeks an experienced DevSecOps Engineer to own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers).

We're partnering with a leading financial services client to appoint a DevSecOps Consultant to drive secure engineering practices across large-scale, cloud-based platforms. This role is ideal for someone who has come from a hands-on DevSecOps Engineering background and has since transitioned into ar

Sheffield Green, United Kingdom | Posted on 29/09/2026 We provide end-to-end IT solutions and services including Applications services, Data & Analytics services, AI/ML Technologies and Professional services in the UK and EU market. Hi We are looking for TechnicalLead(IAM) role for Sheffield location. This is a contract role. Pease find the JD In this role, you will: • Own the technical solution and architecture for theworkstream., • Define and maintain High Level Designs (HLDs) and LowLevel Designs (LLDs)., • Lead technical decision making and technology selection., • Ensure alignment with Enterprise Architecture, Securityand Regulatory standards., • Drive adoption of Zero Trust and Identity-first designprinciples., • Provide technical leadership and mentoring to engineeringteams., • Review solution designs, code and infrastructure changes., • Manage technical risks, assumptions and dependencies., • Coordinate integration activities across internal teamsand third-party suppliers., • Support planning, estimation and technical delivery., • Define and assure non-functional requirements including:, • Availability - Resilience - Performance - Scalability -Observability - Security - Ensure solutions are production-ready andoperationally supportable., • Supportarchitecture governance, design authorities and technical steering groups., • Championengineering best practices, DevSecOps and continuous improvement. #J-18808-Ljbffr

This role leads the design and delivery of cloud-native, full stack products on Microsoft Azure, running on Azure Kubernetes Service (AKS). You will be hands‑on across the stack while setting technical direction, strengthening engineering standards, and ensuring solutions are secure, resilient, observable, and straightforward to operate in production. • Lead full stack delivery across React (TypeScript) front-end applications and Java/Python back‑end services, including microservices and APIs., • Own cloud‑native solution design for AKS‑based platforms, defining service boundaries, resilience patterns, scaling approaches, deployment strategies, and operational readiness., • Design, build, and operate back‑end services using Java (Spring Boot) and/or Python (FastAPI/Flask), covering API design with OpenAPI, performance optimisation, and security controls., • Develop modern user interfaces with React, focusing on accessible design, reusable components, and efficient state management., • Design and maintain Kubernetes deployments on AKS, including manifests, ingress configuration, autoscaling, configuration and secrets management, service‑to‑service communication, and rollout/rollback patterns., • Implement and maintain DevSecOps practices using Azure DevOps, building CI/CD pipelines with automated quality gates such as unit and integration tests, SAST/DAST where applicable, and dependency scanning., • Drive observability and production excellence by implementing logging, metrics, and tracing, creating actionable alerts, defining SLOs and SLIs, and leading incident response and post‑incident improvement activities., • Embed security by design through secure coding practices, threat modelling, role‑based access control and least privilege, secrets management including Key Vault integration, and modern identity patterns using OAuth2 and OIDC., • Coach and uplift engineers across the stack by leading code and design reviews, mentoring, driving consistent standards, and actively reducing technical debt., • Collaborate closely with product, architecture, UX, QA, and platform teams to plan delivery, manage risk, and ensure successful outcomes., • Set clear technical direction, making well‑reasoned trade‑offs between speed and sustainability., • Build an inclusive engineering culture where diverse viewpoints are welcomed and used to improve outcomes., • Take accountability for delivery and production stability, focusing on root causes rather than temporary workarounds., • Maintain delivery momentum by removing blockers, simplifying complex processes, automating where possible, and helping the team ship high‑quality software., • Significant experience in Senior Lead or Lead Engineer roles delivering and operating production systems., • Strong hands‑on engineering background in Java, including Spring Boot, REST APIs, testing strategies, and performance tuning., • Strong hands‑on experience with Python for service development and automation, preferably using FastAPI or Flask., • Proven experience building and maintaining front‑end applications with React, ideally using TypeScript, modern hooks, and robust front‑end testing approaches., • Demonstrable experience running workloads on Azure Kubernetes Service (AKS), with solid understanding of Kubernetes fundamentals such as deployments, services, ingress, configmaps, secrets, and horizontal pod autoscaling (HPA)., • Practical experience with containerisation using Docker and packaging and deployment of containerised workloads., • experience designing and executing release strategies, including blue/green deployments, canary releases, rolling upgrades, and rollback planning., • Strong experience with Azure DevOps, including CI/CD pipeline design and implementation for build, test, and deploy stages, approvals, and environment management., • Good understanding of repository hygiene, branching strategies, and maintaining high‑quality pull requests., • Solid understanding of security, reliability, and operability in a regulated or enterprise environment., • experience applying DevSecOps practices including SAST and DAST, and dependency scanning within CI/CD pipelines., • Practical knowledge of modern identity and access management, including OAuth2 and OIDC., • experience with Azure services commonly used alongside AKS, such as Azure Container Registry (ACR), Key Vault, Azure Monitor, Log Analytics, Application Insights, API Management (APIM), and Service Bus or Event Hubs., • Familiarity with Infrastructure as Code tools, particularly Bicep or Terraform., • Understanding of service mesh technologies and policy controls, as well as network security patterns including private endpoints and ingress controls., • Strong background in domain‑driven design and event‑driven architecture., • experience leading cross‑functional engineering teams and influencing technical direction., • Ability to balance short‑term delivery needs with long‑term sustainability and maintainability. You will join a culture that values strong engineering practices, inclusive collaboration, and continuous improvement. The environment encourages ownership of technical decisions, supports mentoring and skills development, and recognises the importance of secure, reliable, and well‑operated systems. You will have the opportunity to shape engineering standards, work with modern cloud‑native technologies, and contribute to an environment where thoughtful trade‑offs and sustainable delivery are genuinely appreciated. You will work in a modern cloud‑native environment built on Microsoft Azure and Azure Kubernetes Service, using technologies such as Java (Spring Boot), Python (FastAPI/Flask), React with TypeScript, Docker, and Azure DevOps for CI/CD. The role involves close collaboration with product, architecture, UX, QA, and platform teams in a setting that emphasises observability, security, and production excellence. The engineering culture promotes inclusive teamwork, high code quality, and automation across the delivery lifecycle. Sheffield, UK .00 GBP Daily #J-18808-Ljbffr

A leading technical recruitment consultancy is seeking a skilled DevSecOps Consultant to drive engineering excellence and integrate security practices.

Zohorecruit in Sheffield is seeking a Technical Lead (IAM) for a contract role. You will own the technical solution and architecture for the workstream, setting HLDs/LLDs and guiding technology choices to meet security and regulatory standards. You will lead technical decisions, mentor engineers, review designs and code, manage risks and dependencies, and coordinate with internal teams and third-party suppliers. Production-readiness and DevSecOps are key focus areas. #J-18808-Ljbffr

GCS Recruitment is seeking a Technical Lead for Identity & Access Management (IAM) in Sheffield on a hybrid basis. You will shape and deliver next‑generation IAM services for a global financial services client, leading technical design, architecture, and governance across a large enterprise programme. This contract role requires deep IAM expertise, Zero Trust framing, and DevSecOps experience, with responsibilities spanning HLD/LLD, risk management, cross-team collaboration, and mentoring #J-18808-Ljbffr

Talent Smart in the United Kingdom is seeking a DevSecOps Consultant to drive secure engineering practices across large-scale, cloud-based platforms from Sheffield. The role combines hands-on DevSecOps engineering with architecture, design and advisory responsibilities, with two days per week onsite

A technology services company is seeking a GCP DevOps Engineer to optimize CI/CD, cloud infrastructure, and application performance. You will work extensively with Kubernetes and Google Cloud Platform. This contract position offers hybrid working, with three days in the office, preferably in Sheffield, and an excellent rate of £450.00 - £500.00 per day. If you have a strong background in Python and DevSecOps practices, we want to hear from you. #J-18808-Ljbffr

Role Title: AWS DevOps Engineer Location: Sheffield (Hybrid - 2 days per week onsite) Role Category: Inside IR35 We're recruiting for an experienced AWS DevOps Engineer to join an enterprise engineering team within a leading global financial services organisation. This role offers the opportunity to work on large-scale AWS environments, combining cloud infrastructure, software engineering, automation, CI/CD and Infrastructure as Code. You'll work closely with engineering, architecture, cybersecurity and operations teams to deliver secure, resilient and highly available cloud-native solutions. • Design, build and maintain AWS cloud infrastructure across compute, storage, networking and IAM services., • Develop and maintain Infrastructure as Code using Terraform and other automation tools., • Build and support CI/CD pipelines for infrastructure and application deployments., • Develop automation and backend services using Python and Golang., • Design and maintain RESTful APIs, microservices and distributed cloud-native applications., • Work with Docker, Kubernetes and serverless technologies across AWS environments., • Support relational and NoSQL databases, including database schema and deployment changes., • Implement and maintain database change management using Liquibase or similar tooling., • Implement monitoring, logging, alerting and distributed tracing using technologies such as Splunk, ELK, Prometheus and Grafana., • Troubleshoot production issues, perform root cause analysis and implement solutions to improve reliability and performance., • Work closely with architects, developers, infrastructure and cybersecurity teams to support enterprise cloud platforms., • Ensure cloud infrastructure and applications comply with security, governance, risk and regulatory requirements., • Contribute to technical design, automation, continuous improvement and operational procedures., • Support Agile delivery and contribute as a technical SME across cloud and DevOps initiatives., • Proven experience in a DevOps, Cloud Engineering, Platform Engineering or Software Engineering role., • Strong hands‑on experience with AWS in an enterprise environment., • Strong understanding of AWS compute, storage, networking and IAM services., • Strong Python development or automation experience., • Proven experience with Terraform and Infrastructure as Code., • Experience building and maintaining CI/CD pipelines using tools such as Jenkins, GitLab CI or equivalent., • Strong experience with Linux, Docker and containerised environments., • Experience with Kubernetes and/or serverless technologies., • Experience developing RESTful APIs, microservices and distributed systems., • Experience with relational and NoSQL databases., • Experience with messaging, streaming or integration services., • Strong experience with cloud monitoring, logging and alerting., • Good understanding of cloud security, authentication, encryption and IAM., • Strong troubleshooting, problem‑solving and production support experience., • Experience working within Agile environments., • Excellent communication and stakeholder management skills., • Proficiency in Golang., • Experience with Liquibase or similar database change management tools., • AWS certifications such as AWS Certified Developer or AWS Certified DevOps Engineer., • Experience with GCP or other public cloud platforms., • Experience working within financial services or other regulated environments., • Strong software engineering background combined with infrastructure experience., • Experience with Splunk, ELK, Prometheus, Grafana or distributed tracing., • Knowledge of DevSecOps, cloud governance and regulatory controls., • Experience with non‑functional testing and continuous testing practices., • Experience with messaging and streaming technologies. This is an excellent opportunity to join a high‑performing engineering team supporting enterprise‑scale AWS environments, with a strong focus on cloud infrastructure, Python development, automation, CI/CD, Infrastructure as Code, cloud‑native engineering and secure software delivery. #J-18808-Ljbffr

A leading technical recruitment consultancy is seeking an Enterprise Security Architect to drive engineering excellence across DevSecOps and Cyber Security. Ideal candidates will have strong DevSecOps expertise, lead engineering improvement initiatives, and possess a related degree.

DevSecOps, Cyber Security, embedding secure-by-design principles, standardisation, automation, and DevOps best practices. DevSecOps, Cyber, promoting standardisation, automation, and continuous improvement.

Vehicle Maintenance Field Engineer | Sheffield S9 2SP | Full Time | £40,000 per annum As one of the leading vehicle rental specialists in the UK, there has never been a more exciting time to join our team of customer-focused professionals.With an expanding national network of locations and a fleet

Electrical Maintenance Engineer Location: Rotherham Salary: £51000 Shifts: 4 on 4 off days and nights Benefits: • 25 days' holiday plus statutory days • Option to buy up to 5 additional holidays after probation • Flexible bank holiday scheme • Company pension contributions of up to 14% •

We are looking for a Maintenance Engineer (Electrical Bias) for a permanent position based with our client in Sheffield.Immediate start available (subject to interview process) Salary is £43,719.This will be working 38 hour per week on a shift rotation Week 1 – Monday to Thursday 6am until 2pm &

Maintenance Engineer Electrical / Electrical Maintenance Engineer Company profile: Part of a larger packaging solutions provider this arm of the business is responsible for safe, secure logistics in transit.They are looking for a Maintenance Engineer Electrical bias to join their teaam Title: Mainte

Maintenance Engineer – FMCG Location: Chapeltown Salary: £46,463 + Bonus + Pension + Overtime Off-peak (summer & autumn period generally) - Monday-Friday, double-day shift, 0600-1400 & 1400-2200 Peak periods (winter & spring generally) - Monday-Sunday, 12-hour shifts, 4-days on / 4 days off, 0600