Senior DevSecOps Engineer – CI/CD Uplift with GitHub Actions

About the role

We are seeking a Senior DevSecOps Engineer to lead a high‑impact uplift of our CI/CD pipelines and embed security throughout the delivery lifecycle. This hands‑on contract role focuses on modernising existing pipelines and migrating them to GitHub Actions while working closely with development teams.

Key responsibilities

• Analyse, redesign and migrate current CI/CD pipelines to GitHub Actions.
• Integrate security controls such as SAST, DAST, dependency and container scanning into deployment workflows.
• Collaborate with developers to improve secure coding and deployment practices.
• Identify vulnerabilities, configuration risks and gaps across the delivery lifecycle.
• Enhance secrets management, access controls and overall pipeline governance.
• Create reusable workflows, templates and automation scripts.
• Document standards and support the adoption of DevSecOps practices across teams.

Required profile

• Strong experience in DevSecOps, platform engineering or cloud security.
• Hands‑on expertise building and improving CI/CD pipelines.
• Proven ability to work directly with developers and influence engineering practices.
• Excellent communication skills with a pragmatic, delivery‑focused mindset.

Required skills

• GitHub Actions
• CI/CD pipeline design and automation
• SAST and DAST tools
• Dependency and container scanning
• Secrets management
• Access control mechanisms
• Pipeline governance
• Infrastructure as Code (IaC) and automation
• Cloud security concepts

What we offer

• Initial 3‑5 month contract with the possibility of extension.
• High‑impact program to modernise CI/CD and security practices.
• Hands‑on role with strong ownership and close collaboration with engineering teams.
• Opportunity to shape secure delivery standards across the organisation.