C

Capgemini

Global consulting, technology services, outsourcing

Lead Development, Security, and Operations Engineer

DevOps EngineeringUpdated on Nov 10
Full-timeNo salary listed

About the Job

Requirements

  • Proven experience as a DevSecOps Lead, establishing and operating DevSecOps ways of working and associated tooling across the listed areas, hands-on and leading others.
  • Experience with AWS or Azure and networking fundamentals, including identity and access management and network policies.
  • Experience with continuous integration and continuous delivery and GitOps in a secure environment, such as GitHub Actions or Argo CD.
  • Experience with security and compliance tooling, such as Trivy scanning and vulnerability management, HashiCorp Vault, and cert-manager.
  • Experience with containers and orchestration, including Docker, Azure Kubernetes Services, or AWS EKS.
  • Experience with Infrastructure as Code, such as Terraform.
  • Experience with observability tools, such as Grafana or Loki.
  • Experience with scripting and automation using Python or Bash.
  • Ability to work across cross-functional teams, particularly with developers, testers, and DevSecOps engineers.
  • Strong facilitation, communication, and stakeholder management skills, with experience influencing at multiple levels.
  • Must obtain Security Check (SC) clearance. To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last five years, along with other eligibility criteria.

Responsibilities

  • Drive and coordinate DevSecOps, embedding security, compliance, and automation into the software delivery lifecycle and ensuring platforms and applications meet security and operational standards.
  • Design, implement, document, and continuously improve DevSecOps practices across delivery teams.
  • Build and maintain secure, automated continuous integration and continuous delivery pipelines.
  • Integrate security scanning into build, test, and deployment workflows.
  • Manage the vulnerability lifecycle, including allowlist processes, risk acceptance where required, secrets management, and identity and access management.
  • Enforce policies for workloads, container images, and infrastructure.
  • Maintain observability, monitoring, logging, and audit controls; track and remediate technical debt; and improve developed-code quality.
  • Control and govern change across the path to live.
  • Partner with developers to embed secure-by-design engineering and ensure compliance with client security and technical standards.
  • Enable and govern Infrastructure as Code practices across teams and environments.
  • Contribute to incident response, patching cycles, and compliance reporting; capture lessons learned, track actions, and document security processes, controls, and operational runbooks.

About the Company

Capgemini

Global consulting, technology services, outsourcing

Capgemini provides consulting, technology services, and outsourcing to help organizations transform digitally. Its offerings include strategy and transformation consulting, system integration, application development, IT infrastructure management, and managed IT operations. It differentiates itself with a global presence in over 50 countries and a focus on applying AI, cloud, and cybersecurity to real business problems. Its goal is to help clients navigate digital transformation and improve efficiency and innovation through tailored, contract-based or managed services.

Company size
10,001+
Company stage
IPO
Headquarters
Paris, France
Founded
1967

Recently Posted Jobs

Explore more opportunities at Capgemini

See more jobs