Inside IR35 | DevOps Auditor (Audit Phase) Duration: Initial 7 days (potential extension up to 12 months) Day Rate: £475-£525 (Inside IR35) Location: Fully remote (UK-based contractors only) Sector: Healthcare / DevOps & Systems Audit
This engagement is ideal for a hands-on DevOps or platform practitioner with audit, compliance, and regulated environment experience who can quickly assess maturity and advise on next steps toward secure, governed operations.
We're seeking an experienced DevOps Auditor to support a UK healthcare client with an audit of their CI/CD, infrastructure, and operational controls. This short engagement (approx. 7 days) will deliver a compliance-ready assessment, gap analysis, and remediation roadmap, laying the foundation for a potential longer-term 12-month engagement to implement improvements.
Key Responsibilities
1. Review current-state AWS DevOps practices across CI/CD pipelines, infrastructure-as-code (Terraform/Bicep), secrets management, and release/change controls.
2. Capture and assess evidence such as pipeline logs, approvals, artefact integrity/signing, access controls, and configuration baselines.
3. Validate security posture via SAST/DAST scans, dependency and licence reviews, container/image policies, and supply-chain controls.
4. Evaluate logging, monitoring, and observability practices.
5. Map findings to compliance frameworks (e.g., ISO 27001, SOC 2, or NHS DSPT ...