Introduction A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences. Your role and responsibilities Currently, we are looking for a DevSecOps Engineer to join our team in the UK. We are seeking an experienced DevSecOps Engineer to help uplift and standardise the security posture across a large-scale public-sector digital screening programme. The platform spans AWS and Azure, with 20 cloud-based services at varying stages of maturity. The goal is to create a coherent, consistent, and modern cybersecurity baseline across all products by embedding security into CI/CD, Infrastructure-as-Code (IaC), and operational processes. You will work closely with product teams, infrastructure engineers, and delivery squads to embed security early ("shift-left"), automate controls, and ensure consistent guardrails across the entire service portfolio. Key Responsibilities Security Engineering & Automation Implement and embed security controls throughout CI/CD pipelines, ensuring security is built-in rather than bolted-on. Enhance and maintain IaC (Terraform / ARM / Bicep / CloudFormation) ensuring consistent, repeatable, and secure infrastructure deployments across AWS and Azure. Integrate automated security scanning (SAST/DAST/SCA), secrets management, policy enforcement, base image hardening, and runtime protection as part of the delivery workflow. Cloud Security (AWS & Azure) Work with multi-cloud services to design, implement, and maintain security patterns that can be applied consistently across the portfolio. Configure cloud-native security tooling (e.g., guardrails, identity policies, network controls) and ensure all services meet agreed security standards. Collaborate on extracting reusable libraries and toolsets to drive standardisation across teams. CI/CD & Platform Engineering Deliver security improvements through changes to CI/CD and IaC repositories, version controlled alongside application code. Build and refine pipelines that support automated testing, deployment, and governance across cloud environments. Ensure teams can continuously monitor, detect, and remediate vulnerabilities through integrated pipeline tooling. Disaster Recovery & Operational Readiness Contribute to DR strategy uplift by defining consistent runbooks, automated processes, and wargaming tools to validate resilience across services. Ensure operational documentation is clear, repeatable, and usable by delivery and support teams. Collaboration & Delivery Work hand-in-glove with product teams, architects, and infrastructure engineers to socialise patterns, build capability, and embed practices early. Prioritise work based on an existing cybersecurity risk assessment, ensuring high-value improvements are delivered first. Support knowledge sharing, coaching, and embedding of security best practices across engineering teams. MUST BE ELIGIBLE FOR SC CLEARANCE Why this role matters Your work will directly strengthen the security posture of a major national digital screening platform, ensuring consistency, resilience, and trustworthiness across dozens of critical public-facing services. You'll be instrumental in shaping secure engineering standards that will be adopted across multiple teams and cloud environments. Required technical and professional expertise Strong background in DevSecOps principles including shift-left security, automated testing, secure SDLC, and cloud-native security engineering. Hands-on experience with AWS and Azure cloud environments. Experience designing secure and scalable architectures, CI/CD pipelines, and infrastructure automation. Proficiency with IaC tools such as Terraform, ARM, Bicep, CloudFormation. Experience integrating security tools into CI/CD (SAST, DAST, dependency scanning, secrets scanning, container scanning). Familiarity with container orchestration and security (Kubernetes/AKS/EKS). Strong understanding of identity, access, network, and policy enforcement across cloud platforms. Ability to document runbooks, DR processes, and operational guidance. Excellent stakeholder engagement skills across engineering, operations, and delivery teams Preferred technical and professional experience Experience contributing to or maintaining shared libraries or open-source tooling. Knowledge of audit, compliance, and security frameworks. Experience in large public-sector or regulated environments. IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.