The Role: Devops Engineer

Location: Sheffield, UK

Position Type: Contract Inside IR35

Remote work option Available: Hybrid (3 Days onsite in a week)

​

Job Description:

Core Responsibilities:

• Design and maintain Groovy pipeline steps (build, test, package, scan, deploy).

• Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ,SAST/Container).

• Optimise performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch).

• Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modelling).

• Refactor legacy scripts (remove global state, consolidate hashing, standardize templates).

• Document ci-config.yaml standards and usage patterns.

• Mentor engineers on secure pipeline development.

Essential Skills:

• 7+ years engineering; 3+ in CI/CD platform or DevSecOps.

• Strong Jenkins + Groovy shared library expertise.

• Advanced Python automation (JSON/YAML processing, tooling scripts).

• Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata.

• Supply-chain security (SLSA, CycloneDX SBOM, digests).

• Experience with SonarQube, Sonatype IQ, container and SAST scanning.

• Proven performance tuning (caching, parallelization, dependency pruning).

• Compliance Awareness.

Nice-to-Have :

• Artifact signing / attestations (cosign, OCI).

• Terraform module and Helm chart publishing patterns.

• GitOps or release automation experience.

• GCP/AWS cloud experience

Apply now!