Senior DevSecOps Engineer

About the role

<p><strong>Senior DevSecOps</strong><strong> Engineer</strong></p> <p><strong>Location</strong>: London | Practice Area: Technology &amp; Engineering | Type: Permanent</p> <p>Build the platforms that power secure, intelligent and scalable enterprise engineering.</p> <p><strong>The Role</strong></p> <p>At Capco, we're looking for a Senior DevSecOps Engineer to help design, build and modernise enterprise software delivery capabilities for leading financial services organisations.</p> <p>You'll play a key role in developing a modern enterprise Software Development Lifecycle (SDLC) platform, with a focus on CI/CD automation, policy-as-code, security controls and cloud-native engineering.</p> <p>This is a hands-on engineering opportunity where you'll translate architecture into production-ready capabilities, integrate complex enterprise technologies and support engineering teams in adopting scalable, secure delivery practices.</p> <p>You'll also explore approved AI-enabled engineering tools and workflows to improve development productivity, automation and delivery quality, while maintaining appropriate human oversight, security controls and responsible AI practices.</p> <p><strong>What You’ll Do</strong></p> <ul> <li>Build modern CI/CD platforms: Design, develop and implement enterprise GitLab SaaS CI/CD pipelines, reusable engineering patterns and automated workflows, leveraging approved AI-assisted engineering capabilities where appropriate to improve efficiency and quality.</li> <li>Embed security and governance: Implement policy-as-code, automated security and quality gates, change controls, SAST, DAST, secrets management and vulnerability management throughout the SDLC.</li> <li>Engineer cloud-native solutions: Build and integrate services across Azure, Kubernetes and Azure API Management, supporting application, cloud and data workloads, including Snowflake and Salesforce.</li> <li>Modernise enterprise engineering environments: Support migrations from legacy Jenkins, GitLab, SonarQube, Artifactory/Nexus and AWS environments, integrating observability capabilities using Grafana and Prometheus.</li> <li>Enable engineering teams: Translate target architecture into working production capabilities, develop reusable platform services and onboard engineering teams, promoting responsible AI-enabled workflows with appropriate review, auditability and human decision-making.</li> </ul> <p><strong>What We’re Looking For</strong></p> <ul> <li>GitLab and Azure expertise: Extensive hands-on experience designing, building and operating enterprise GitLab CI/CD pipelines and Azure-based engineering solutions.</li> <li>Cloud-native engineering: Strong practical experience with Kubernetes, DevSecOps principles, infrastructure automation and policy-as-code.</li> <li>Security and governance integration: Experience embedding identity, security controls, automated testing, quality gates and compliance requirements into enterprise delivery pipelines.</li> <li>Enterprise modernisation: Demonstrated experience modernising complex engineering environments, integrating multiple technologies and delivering scalable, production-ready platform capabilities.</li> <li>Technical leadership and delivery: Ability to take architectural designs through implementation, collaborate with engineering teams and support knowledge transfer, with an interest in applying approved AI tools and automation responsibly to improve engineering outcomes.</li> </ul> <p><strong>Bonus Points For</strong></p> <ul> <li>Experience integrating Azure API Management with cloud-native platforms and enterprise applications.</li> <li>Familiarity with Snowflake, Salesforce and engineering patterns supporting data-intensive workloads.</li> <li>Experience migrating from Jenkins, SonarQube, Artifactory/Nexus or AWS-based engineering environments.</li> <li>Knowledge of Grafana, Prometheus and enterprise observability practices.</li> <li>Experience using AI-assisted development tools or AI-enabled

Skills