Role Title: DevX Build Pipeline Engineer Duration: contract to run until 30/11/2026 Location: Sheffield. Hybrid, 3 days per week onsite Rate: up to £529 p/d Umbrella inside IR35 Role purpose / summary Own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supply chain integrity across teams. Core Responsibilities: Design and maintain Groovy pipeline steps (build, test, package, scan, deploy). Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container). Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch). Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modelling). Refactor legacy scripts (remove global state, consolidate hashing, standardize templates). Document ci-config.yaml standards and usage patterns. Mentor engineers on secure pipeline development and supply-chain practices. Troubleshoot and prevent pipeline incidents. Essential Skills: 7+ years engineering; 3+ in CI/CD platform or DevSecOps. Strong Jenkins + Groovy shared library expertise. Advanced Python automation (JSON/YAML processing, tooling scripts). Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform...