DevSecOps Engineer
London Area, United Kingdom Contract Posted 3 weeks ago
DevSecOps | Secure Coding Engineer
London | Hybrid | 4 days in the office
Contract | £700 - £800 per day Inside IR35
A leading global financial services organisation is seeking a Build, Deployment & Secure Coding Engineer to support and enhance its enterprise build, deployment and secure software delivery platforms. You'll play a key role in developing automated CI/CD pipelines, maintaining build and deployment tooling, implementing secure coding controls and supporting software supply chain security within a highly regulated environment.
Key Responsibilities:
- Engineer and support enterprise build, packaging and deployment platforms.
- Develop and maintain automated CI/CD pipelines using industry best practices.
- Support application migrations to Octopus Deploy and maintain integrations with GitHub Enterprise, TeamCity, Artifactory and ServiceNow.
- Write, review and troubleshoot C#/.NET code and PowerShell scripts to support deployment tooling and automation.
- Implement secure coding controls including SAST, SCA, dependency scanning and secrets detection.
- Administer artefact repositories, package management and software supply chain controls.
- Troubleshoot build, deployment and application issues across Windows and Linux environments.
- Support platform upgrades, monitoring, governance, audit and continuous improvement initiatives.
Key Skills & Experience:
- Track record of enterprise software build, packaging and deployment engineering
- Hands-on experience with Octopus Deploy, TeamCity, GitHub Enterprise, JFrog Artifactory/Xray or Azure DevOps Server.
- Strong knowledge of MSBuild, NuGet, IIS, REST APIs, Git and artefact management.
- Experience implementing secure coding practices, including CodeQL, Dependabot, SAST, SCA and software supply chain security.
- Knowledge of Windows Server, Linux, SQL Server and automated deployment techniques.
- Experience working within regulated enterprise environments with strong change, release and governance controls.
- Experience with Docker, Kubernetes, Terraform or CyberArk would be advantageous.
