DevSecOps Engineer

DevSecOps Engineer

DXC are hiring a DevSecOps Engineer for our secure account in Hampshire.

Due to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role, and have the right to work in the United Kingdom. Some roles may also be subject to nationality requirements where these are necessary to meet UK Government or contractual security obligations.

Primary objective: To design, implement, and automate secure infrastructure and automated deployment pipelines that enforce a strict "never trust, always verify" security model across MOD's digital estate.

Key responsibilities
Zero Trust implementation: Apply ZTA principles across defence cloud and hybrid infrastructure, covering identities, devices, networks and data.
Pipeline security: Embed automated compliance checks, container scanning and vulnerability assessments in CI/CD pipelines.
Identity and access: Enforce IAM, MFA, RBAC, ABAC and PAM controls.
Infrastructure as Code: Manage secure, immutable infrastructure and network policies through controlled, repeatable code.
Monitoring and enforcement: Use telemetry and automated controls to detect, contain and respond to anomalies.
Compliance and hardening: Meet UK MOD security requirements, NCSC guidance and approved hardening standards.
3. Core technical skills
Zero Trust: NCSC and NIST frameworks, micro-segmentation, software-defined perimeters and context-aware access.
Cloud and infrastructure security: Azure, AWS, MOD-accredited platforms and on-premises virtualised infrastructure.
Infrastructure as Code: Terraform, Ansible and CloudFormation.
Container security: Docker, Kubernetes, Istio, Prisma Cloud and Trivy.
Networking and identity: VLANs, VPNs, proxies, firewalls, OAuth 2.0, OpenID Connect, SAML and LDAP.
4. Leadership and personal strengths
Technical leadership: Lead Zero Trust adoption across multi-supplier teams.
Problem-solving: Diagnose network, identity federation and security integration issues.
Risk and governance: Balance delivery pace with defence security requirements.
Communication: Explain complex security issues clearly to project managers and MOD stakeholders.
Discretion: Handle sensitive defence information with judgement and integrity.