C

Capgemini

Global consulting, technology services, outsourcing

Lead Devsecops Engineer

DevOps EngineeringUpdated on Nov 14
Full-timeNo salary listed

About the Job

Requirements

  • Proven experience as a DevSecOps Lead, establishing and operating DevSecOps ways of working and associated tooling across the specified areas, both hands-on and while leading others.
  • Experience with AWS or Azure and networking fundamentals, including identity and access management and network policies.
  • Experience with continuous integration and continuous delivery and GitOps in a secure environment, such as GitHub Actions or Argo CD.
  • Experience with security and compliance tooling, such as Trivy scanning and vulnerability management, HashiCorp Vault, and cert-manager.
  • Experience with containers and orchestration, such as Docker, Azure Kubernetes Service, or AWS Elastic Kubernetes Service.
  • Experience with Infrastructure as Code, such as Terraform.
  • Experience with observability tools, such as Grafana or Loki.
  • Experience with scripting and automation, such as Python or Bash.
  • Ability to work across cross-functional teams, particularly with developers, testers, and DevSecOps engineers.
  • Facilitation, communication, and stakeholder management skills, with experience influencing at multiple levels.
  • Must obtain Security Check clearance; eligibility requires continuous residence in the United Kingdom for the last 5 years.

Responsibilities

  • Drive and coordinate DevSecOps, embedding security, compliance, and automation into the software delivery lifecycle so platforms and applications meet security and operational standards.
  • Design, implement, document, and continuously improve DevSecOps practices across delivery teams.
  • Build and maintain secure, automated continuous integration and continuous delivery pipelines.
  • Integrate security scanning into build, test, and deployment workflows.
  • Manage vulnerability lifecycles, including allowlist processes and risk acceptance where required, as well as secrets management and identity and access management.
  • Enforce policies for workloads, container images, and infrastructure.
  • Establish observability, monitoring, logging, and audit controls; track and remediate technical debt and improve developed-code quality.
  • Control and govern changes across the path to live.
  • Partner with developers to embed secure-by-design engineering and ensure compliance with client security and technical standards.
  • Enable and govern Infrastructure as Code practices across teams and environments.
  • Contribute to incident response, patching cycles, and compliance reporting; capture lessons learned, track actions, and document security processes, controls, and operational runbooks.

About the Company

Capgemini

Global consulting, technology services, outsourcing

Capgemini provides consulting, technology services, and outsourcing to help organizations transform digitally. Its offerings include strategy and transformation consulting, system integration, application development, IT infrastructure management, and managed IT operations. It differentiates itself with a global presence in over 50 countries and a focus on applying AI, cloud, and cybersecurity to real business problems. Its goal is to help clients navigate digital transformation and improve efficiency and innovation through tailored, contract-based or managed services.

Company size
10,001+
Company stage
IPO
Headquarters
Paris, France
Founded
1967

Recently Posted Jobs

Explore more opportunities at Capgemini

See more jobs