Description
Technical Lead - DevSecOps Engineer (SC Cleared)
£650 per day
Outside IR35
Remote
3-6 month contract
Please note, SC security clearance is required for this role
Role responsibilities:
- Programming and build (cloud engineering). You can use and contribute to agreed security standards and specifications to design, create, test and document new or amended software/capabilities in line with the technology stack detailed below. You can create clean and clear documented code and understand the philosophy of coding in the open
- Modern standards approach. You can lead and ensure adoption of a modern standards approach throughout automation and testing. This includes aligning to sector specific standards such as the Digital by Default Service Standard (DbDSS) and broader industry best practises such as 12 factor, Secure Software Development Lifecycle (S-SDLC) and DevSecOps to your development approach
- Availability and capacity management. You can define, analyse, plan, forecast, measure, maintain and improve all aspects of the availability of services
- Information security. You can assure and maintain the security, confidentiality and integrity of information systems through compliance with relevant legislation, regulations and departmental policies
- User focus. You can lead the collaboration with user researchers and service designers and/or represent users internally
Essential criteria:
- Experience with developing highly scalable, distributed, cloud native, data centric applications and understanding of the underlying enabling technologies including containerisation, container orchestration, service mesh, service discovery, messaging, ingress, Proxy, persistent and ephemeral storage, secrets management etc on AWS
- Experience with developing data centric services using programming languages and frameworks comprising of Micro Service orientated Architecture (MSoA) written in: Python
- Experience with orchestration and configuration management of cloud provisioned PaaS/FaaS using: Terraform, Ansible
- Experience with (un)structured database(s), object storage and search: S3, RDS PostgreSQL, MSSQL, Elasticsearch, RedShift, DynamoDB etc using the CQRS pattern
- Experience with pub/sub messaging platforms, integration frameworks and workflow orchestration: ActiveMQ, SQS, StepFunctions, Apache Airflow, Apache Beam etc
- Experience with CI/CD tooling in an DevSecOps environment: GitlabSCM, Gitlab CI, Artifactory/Nexus, Veracode, Sonarqube etc
- Experience with developing well documented APIs using: AWS API Gateway, Swagger and OpenAPI standards
- Experience with working in a Test-Driven Development or Acceptance Test Driven Development approach using a range of tools/frameworks, ensuring test coverage and execution is in line with the project, programme or portfolio Test Strategy