Senior DevSecOps Engineer

Since our establishment in 1990, Methods has partnered with a range of central government departments and agencies to transform the way the public sector operates in the UK.

Our mission is to improve and safeguard public-facing services. We apply digital thinking to ensure the future of our public services is centered around our citizens.

Our human touch sets us apart from other consultancies, system integrators and software houses - we have a customer-centric value system whereby we focus on delivering what is right for our clients.

We passionately support our clients in the success of their projects while working collaboratively to share skill sets and solve problems. At Methods we have fun while working hard; we are not afraid of making mistakes and learning from them.

Methods are experts in delivering secure, resilient cyber and information services – keeping systems and data safe. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks.

We are looking for a Senior DevSecOps Engineer to build, automate and operate secure, resilient cloud and platform services. You will combine hands-on engineering with a security-first approach, helping teams deliver software reliably from development through to production. 

The role focuses on Infrastructure as Code, CI/CD, container platforms and operational resilience, with particular emphasis on Azure, Terraform and Kubernetes. You will work closely with developers, architects, security specialists and delivery colleagues to turn requirements into practical, supportable solutions. 

• Build and maintain cloud and platform infrastructure using Terraform and other automation tools, creating reusable, version-controlled components. 

• Develop and improve CI/CD pipelines for infrastructure and applications, supporting consistent deployment across development, test and production environments. 

• Embed security into engineering workflows through automated scanning, secrets management, access controls and secure configuration. 

• Deploy and support containerised applications and Kubernetes services, including configuration, networking and deployment troubleshooting. 

• Implement and test resilience, backup and recovery arrangements in line with agreed service requirements. 

• Improve logging, monitoring and alerting; investigate incidents and deployment failures; and address underlying causes. 

• Contribute to threat modelling, security reviews and remediation of findings, working with security and assurance specialists. 

• Translate requirements into manageable engineering tasks, identify dependencies and risks, and communicate progress clearly. 

• Work with developers, operations colleagues and third-party suppliers to resolve integration issues and improve service supportability. 

• Maintain clear technical documentation, runbooks and handover materials, and share knowledge through mentoring and peer review. 

Essential skills and experience 

• Demonstrable hands-on experience in DevOps, DevSecOps, platform engineering or a closely related role, including responsibility for production services. 

• Practical experience building and supporting Microsoft Azure infrastructure and services. 

• Strong Terraform skills, including reusable modules and controlled infrastructure deployment. 

• Experience building and maintaining CI/CD pipelines using tools such as Azure DevOps, GitHub, GitLab or Jenkins; expertise in every listed tool is not required. 

• Working experience with Kubernetes, containerisation and Linux administration, including troubleshooting application and platform issues. 

• Ability to automate operational and deployment tasks using scripting languages such as Python or PowerShell, and configuration tools such as Ansible. 

• Practical understanding of identity and access management, secrets management, private networking and secure deployment practices. 

• Experience with monitoring, logging, incident investigation and recovery, with an emphasis on reliable, supportable services. 

• Ability to work independently within an agreed technical direction, explain trade-offs, collaborate across disciplines and support less experienced engineers. 

Desirable experience 

• Delivery in government, defence or other security-sensitive or regulated environments. 

• High-side, air-gapped or disconnected infrastructure, including hybrid cloud and on-premises platforms. 

• Azure Kubernetes Service, Helm, Rancher or multi-site high-availability platforms. 

• Security scanning and software supply-chain controls using tools such as Trivy, Grype or Black Duck; policy as code; or threat modelling. 

• Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA. 

• Site reliability engineering practices, disaster recovery testing or supplier-to-operations handover. 

Candidates are not expected to have used every technology listed. Strong core engineering skills, sound security judgement and the ability to learn unfamiliar tools are more important than matching the full technology list. 

This role will require you to have or be willing to go through Security Clearance. As part of the onboarding process candidates will be asked to complete a Baseline Personnel Security Standard; details of the evidence required to apply may be found on the government website Gov.UK. If you are unable to meet this and any associated criteria, then your employment may be delayed, or rejected . Details of this will be discussed with you at interview

Methods is passionate about its people; we want our colleagues to develop the things they are good at and enjoy.

By joining us you can expect

• Autonomy to develop and grow your skills and experience
• Be part of exciting project work that is making a difference in society
• Strong, inspiring and thought-provoking leadership
• A supportive and collaborative environment

Development – access to LinkedIn Learning, a management development programme, and training

Wellness – 24/7 confidential employee assistance programme

Social – office parties, breakfast Tuesdays, monthly pizza Thursdays, Thirsty Thursdays, and commitment to charitable causes

Time Off – 25 days of annual leave a year, plus bank holidays, with the option to buy 10 extra days each year

Volunteering – 2 paid days per year to volunteer in our local communities or within a charity organisation

Pension – Salary Exchange Scheme with 4% employer contribution and 5% employee contribution

Life Assurance – of 4 times base salary

Private Medical Insurance – which is non-contributory (spouse and dependants included)

Worldwide Travel Insurance – which is non-contributory (spouse and dependants included)

Enhanced Maternity and Paternity Pay

Travel – season ticket loan, cycle to work scheme

For a full list of benefits please visit our website (www.methods.co.uk/careers/benefits)