Lead DevSecOps Engineer

Location: Remote 
Position Type: Permanent
Key Responsibilities:
As the Lead DevSecOps Engineer, your primary responsibilities will be:

• Work alongside the Principle DevOps Engineer design, secure & deliver Cloud Landing Zone(s) across multiple environments and geographies, primarily on AWS followed by Azure & GCP.
• The delivery of a Cloud agnostic ecosystem of tooling and operational processes, based on DevSecOps, CICD & FinOps best practices, to deliver and maintain Landing Zone(s) including automated Account vending & inflation.
• Be the driving technical force behind the delivery & operation of Landing Zone(s) and supporting automation following DevSecOps practices to be secure-by-design.
• Work closely with the QA Team to ensure both the Landing Zone(s) and application services are delivered securely & consistently.
• Support the Lead DevOps Engineer & team as they build Kubernetes based microservices on the Landing Zone(s) and supporting tooling &/or pipelines that you will deliver.

You will be collaborating closely with cross-functional teams & personnel, where design inputs & requirements are expected to be fluid & changeable.
In addition to technical leadership skills, you will be expected to:

• Lead team of DevSecOps Engineer(s) (including recruitment).
• Mentor junior members of the wider team & organisation as/when required.
• Deputise for the Principle DevOps Engineer as/when required.

Position Overview:

• Landing Zone Delivery: Build and secure the AWS Landing Zone using AWS Organisations & Control Tower, enabling Account vending & management via Account Factory for Terraform (AFT).
• Continuous Integration/Continuous Deployment (CI/CD): Ensure secure & effective testing and deployment of Landing Zone(s) using CI/CD best practices to enable efficient, secure software & infrastructure delivery.
• Infrastructure as Code (IaC): Deliver services using Infrastructure as Code (IaC) code and templates to test, provision, configure, and manage infrastructure components using tools such as Terraform, Ansible, or similar.
• Automation: Be the drivering force for the automation of infrastructure provisioning and orchestration to streamline deployment processes, ensuring consistency and reliability across multiple environments & regions.
• Security: Working closely with the Security Architect & Principle DevOps Engineer, you will ensure security of the Platform / Landing Zone(s), including remote access.
• Documentation: Ensure effective documentation to ensure a clean handover of Cloud environments to Ops & SRE teams.
• Infrastructure Maintenance: Ensure the effective monitoring of infrastructure components to ensure optimal performance, scalability, and reliability. This will include self-healing capabilities.
• Support for Developers and QA: Collaborate with development and QA teams to provide guidance and support in building automated testing and deployment pipelines.
• Infrastructure Optimization: Identify opportunities for infrastructure optimization, cost reduction, and performance improvement.
• Documentation: Maintain detailed documentation of infrastructure configurations and deployment processes.

Qualifications:

• Demonstrable experience of lead Engineering or technical leadership role(s).
• Demonstrable experience of DevSecOps practices and the promotion thereof.
• Strong understanding of Infrastructure as Code (IaC) principles and practices.
• Strong understanding of AWS Landing Zone best practices
• Strong understanding of cloud computing platforms (primarily AWS, but Azure &/or Google Cloud is beneficial) and on-premises environments.
• Proficiency in IaC tools and scripting languages (e.g., Terraform, Ansible, Python, etc.).
• Experience with containerization and orchestration tools (e.g., Docker, Kubernetes).
• Excellent problem-solving and analytical skills.
• Strong communication and collaboration skills.
• Ability to work effectively in cross-functional teams.

Key Technical Skills:

• Terraform (Terraform cloud / HCP Terraform knowledge an advantage)
• GitHub & GitHub Actions
• AWS Organisations
• AWS Control Tower (including Account Factory for Terraform - AFT)
• Python (including curating Python packages)