20 jobs found

Cloud Architect - eDV Cleared Location: London (On-site) Salary: Up to £100,000 + Benefits Clearance: Active eDV Clearance Required To apply, email: Design Secure Cloud Solutions for Critical National Security Environments A leading organisation operating within the National Security sector is seeking an experienced Cloud Architect to support the design and delivery of secure cloud infrastructure and platforms within highly sensitive environments. This is a hands-on architecture role focused on building scalable, secure, and resilient cloud solutions that support mission-critical operations and high-side IT environments. You'll work closely with engineering, security, and delivery teams to shape cloud strategy, define technical standards, and support the deployment of modern infrastructure solutions across complex programmes. The Role As a Cloud Architect, you'll play a key role in designing and implementing secure cloud environments within a highly regulated setting. Responsibilities include: Designing secure cloud architectures for sensitive and mission-critical systems Defining infrastructure standards, patterns, and best practices Supporting cloud migration and transformation initiatives Working closely with DevOps, Infrastructure, Security, and Software Engineering teams Producing high-quality architecture documentation and technical designs Ensuring solutions align with security, compliance, and operational requirements Supporting infrastructure automation and Infrastructure as Code approaches Providing technical leadership and guidance across project teams Contributing to solution reviews, risk assessments, and governance activities Supporting the integration of cloud services within high-side IT environments Required Skills & Experience Proven experience working as a Cloud Architect within secure or enterprise environments Strong knowledge of cloud platforms such as AWS, Azure, or GCP Experience designing secure and scalable cloud-native architectures Strong understanding of networking, infrastructure, and security principles Experience with Infrastructure as Code tools such as Terraform or CloudFormation Knowledge of containerisation and orchestration technologies Experience supporting DevSecOps or CI/CD environments Ability to produce detailed technical documentation and architectural artefacts Strong stakeholder engagement and communication skills Experience working within highly regulated or security-focused environments Desirable Experience Experience within Defence, Government, or National Security programmes Exposure to high-side or classified IT environments Familiarity with Zero Trust or secure-by-design principles Knowledge of Kubernetes, Docker, or platform engineering approaches Experience contributing to technical governance and assurance activities What's On Offer Opportunity to work on high-impact national security programmes Access to complex and technically challenging environments Collaborative engineering and architecture teams Long-term programme work with modern cloud technologies Competitive salary up to £100,000 plus benefits If you hold active eDV Clearance and are interested in working on secure cloud transformation projects, please apply for immediate consideration.

CLOUD NATIVE SOFTWARE DEVELOPER - eDV CLEARED NEW PERMANENT OPPORTUNITY AVAILABLE FOR AN eDV CLEARED CLOUD NATIVE SOFTWARE DEVELOPER IN CHELTENHAM Permanent opportunity for an eDV Cloud Native Software Developer Leading technology consultancy delivering projects across the UK National Security sector Salary up to £95,000 Cheltenham-based Clearance retention bonus available Opportunity to work on some of the UK's most sensitive and mission-critical programmes To apply, email: Active eDV Clearance is essential WHO WE ARE? We are supporting a leading technology consultancy with an outstanding reputation for delivering complex software solutions into the UK National Security and Defence community. Due to continued programme growth, we are looking for experienced Cloud Native Software Developers to join high-performing engineering teams working on secure, cutting-edge platforms that directly support national security operations. WHAT WILL THE CLOUD NATIVE SOFTWARE DEVELOPER BE DOING? You'll be designing, developing and deploying secure cloud-native applications that solve complex real-world problems for highly classified government customers. Working within Agile engineering teams, you'll contribute throughout the full software lifecycle, helping to shape technical solutions while building scalable, resilient and secure systems. This is an opportunity to work with modern engineering practices, cloud technologies and containerised environments on programmes where your work has genuine operational impact. WE NEED THE CLOUD NATIVE SOFTWARE DEVELOPER TO HAVE Active eDV Clearance Strong commercial software engineering experience Experience building cloud-native applications using AWS and/or Azure Strong knowledge of Java, Python, Go or similar modern programming languages Experience with Kubernetes, Docker and containerised microservices Knowledge of Infrastructure as Code (Terraform, CloudFormation or similar) Experience with CI/CD pipelines and DevSecOps practices Understanding of distributed systems and modern software architecture Passion for delivering secure, high-quality software within Agile teams BENEFITS Salary up to £95,000 Clearance retention bonus Performance bonus Hybrid working Private medical insurance Generous pension contribution 25 days annual leave plus bank holidays, with the option to buy additional leave Ongoing training, certifications and career development Access to some of the UK's most exciting National Security programmes TO BE CONSIDERED Please either apply through this advert or email your CV directly. For further information, please get in touch for a confidential discussion. KEY SKILLS: eDV, Developed Vetting, Cloud Native, Software Engineer, Software Developer, Java, Python, Go, AWS, Azure, Kubernetes, Docker, Terraform, CloudFormation, CI/CD, DevSecOps, Microservices, Distributed Systems, National Security, Defence, Cheltenham.

CLOUD NATIVE SOFTWARE DEVELOPER - eDV CLEARED NEW PERMANENT OPPORTUNITY AVAILABLE FOR AN eDV CLEARED CLOUD NATIVE SOFTWARE DEVELOPER IN LONDON Permanent opportunity for an eDV Cloud Native Software Developer Leading technology consultancy delivering projects across the UK National Security sector Salary up to £95,000 London-based with hybrid working Clearance retention bonus available Opportunity to work on some of the UK's most sensitive and mission-critical programmes To apply, email: Active eDV Clearance is essential WHO WE ARE? We are supporting a leading technology consultancy with an outstanding reputation for delivering complex software solutions into the UK National Security and Defence community. Due to continued programme growth, we are looking for experienced Cloud Native Software Developers to join high-performing engineering teams working on secure, cutting-edge platforms that directly support national security operations. WHAT WILL THE CLOUD NATIVE SOFTWARE DEVELOPER BE DOING? You'll be designing, developing and deploying secure cloud-native applications that solve complex real-world problems for highly classified government customers. Working within Agile engineering teams, you'll contribute throughout the full software lifecycle, helping to shape technical solutions while building scalable, resilient and secure systems. This is an opportunity to work with modern engineering practices, cloud technologies and containerised environments on programmes where your work has genuine operational impact. WE NEED THE CLOUD NATIVE SOFTWARE DEVELOPER TO HAVE Active eDV Clearance Strong commercial software engineering experience Experience building cloud-native applications using AWS and/or Azure Strong knowledge of Java, Python, Go or similar modern programming languages Experience with Kubernetes, Docker and containerised microservices Knowledge of Infrastructure as Code (Terraform, CloudFormation or similar) Experience with CI/CD pipelines and DevSecOps practices Understanding of distributed systems and modern software architecture Passion for delivering secure, high-quality software within Agile teams BENEFITS Salary up to £95,000 Clearance retention bonus Performance bonus Hybrid working Private medical insurance Generous pension contribution 25 days annual leave plus bank holidays, with the option to buy additional leave Ongoing training, certifications and career development Access to some of the UK's most exciting National Security programmes TO BE CONSIDERED Please either apply through this advert or email your CV directly. For further information, please get in touch for a confidential discussion. KEY SKILLS: eDV, Developed Vetting, Cloud Native, Software Engineer, Software Developer, Java, Python, Go, AWS, Azure, Kubernetes, Docker, Terraform, CloudFormation, CI/CD, DevSecOps, Microservices, Distributed Systems, National Security, Defence, London.

DEVOPS ENGINEER TRAINEESHIP Become a DevOps Engineer and Build Real-World Experience Are you interested in cloud computing, software development, automation, and building reliable technology platforms? Do you want to gain practical experience while developing technical skills that are in high demand across the technology industry? We are offering a DevOps Engineer Traineeship designed to help aspiring DevOps professionals develop industry-relevant knowledge through structured learning and practical projects. What You Will Learn Throughout the traineeship, you will develop an understanding of: DevOps Fundamentals Linux System Administration Command Line and Shell Scripting Version Control with Git Software Development Lifecycle (SDLC) Continuous Integration (CI) Continuous Delivery and Continuous Deployment (CD) Infrastructure as Code (IaC) Containerisation with Docker Container Orchestration Cloud Computing Fundamentals Cloud Platforms (AWS, Microsoft Azure and Google Cloud) Configuration Management Monitoring and Logging Security Best Practices (DevSecOps) Networking Fundamentals Automation and Scripting Incident Management and Reliability Engineering Practical Experience You will work on realistic DevOps projects that may include: Building CI/CD pipelines Deploying applications to cloud environments Creating Infrastructure as Code templates Managing Docker containers Automating software deployment processes Configuring monitoring and logging solutions Implementing basic cloud infrastructure Applying security best practices to deployment pipelines Troubleshooting deployment and infrastructure issues Portfolio projects demonstrating your DevOps capabilities This practical experience will help you develop a professional portfolio that demonstrates your capabilities to future employers. Ideal Candidate We are looking for individuals who: Have an interest in technology, software development, and cloud computing Enjoy solving technical problems Have strong analytical and logical thinking skills Pay close attention to detail Are willing to learn new skills Can work independently and manage their time effectively Have basic computer skills No previous DevOps experience is required. Successful applicants will undertake our paid DevOps Engineer training programme before progressing into employment. The cost of the training is the responsibility of the learner, and full guidance and support will be provided throughout the programme. Benefits Remote and flexible learning Industry-relevant curriculum Portfolio development opportunities Practical project experience Mentoring and personalised feedback Career guidance and employability support Opportunity to develop skills sought by modern employers Entry Requirements A good level of written English Access to a computer and internet connection Motivation to learn and develop professionally Career Opportunities Upon successful completion, learners may pursue roles such as: Junior DevOps Engineer DevOps Engineer Cloud Support Engineer Platform Engineer Infrastructure Engineer Site Reliability Engineer (SRE) Build and Release Engineer Cloud Operations Engineer Systems Administrator Cloud Infrastructure Engineer Apply Today If you are looking to start a career in DevOps and want to gain practical experience while developing a professional portfolio, we would love to hear from you. Submit your application today and begin your journey towards a rewarding career in DevOps Engineering. We advertise this role across multiple UK locations - you only need to apply once and you'll be considered for all of them.

DEVOPS ENGINEER TRAINEESHIP Become a DevOps Engineer and Build Real-World Experience Are you interested in cloud computing, software development, automation, and building reliable technology platforms? Do you want to gain practical experience while developing technical skills that are in high demand across the technology industry? We are offering a DevOps Engineer Traineeship designed to help aspiring DevOps professionals develop industry-relevant knowledge through structured learning and practical projects. What You Will Learn Throughout the traineeship, you will develop an understanding of: DevOps Fundamentals Linux System Administration Command Line and Shell Scripting Version Control with Git Software Development Lifecycle (SDLC) Continuous Integration (CI) Continuous Delivery and Continuous Deployment (CD) Infrastructure as Code (IaC) Containerisation with Docker Container Orchestration Cloud Computing Fundamentals Cloud Platforms (AWS, Microsoft Azure and Google Cloud) Configuration Management Monitoring and Logging Security Best Practices (DevSecOps) Networking Fundamentals Automation and Scripting Incident Management and Reliability Engineering Practical Experience You will work on realistic DevOps projects that may include: Building CI/CD pipelines Deploying applications to cloud environments Creating Infrastructure as Code templates Managing Docker containers Automating software deployment processes Configuring monitoring and logging solutions Implementing basic cloud infrastructure Applying security best practices to deployment pipelines Troubleshooting deployment and infrastructure issues Portfolio projects demonstrating your DevOps capabilities This practical experience will help you develop a professional portfolio that demonstrates your capabilities to future employers. Ideal Candidate We are looking for individuals who: Have an interest in technology, software development, and cloud computing Enjoy solving technical problems Have strong analytical and logical thinking skills Pay close attention to detail Are willing to learn new skills Can work independently and manage their time effectively Have basic computer skills No previous DevOps experience is required. Successful applicants will undertake our paid DevOps Engineer training programme before progressing into employment. The cost of the training is the responsibility of the learner, and full guidance and support will be provided throughout the programme. Benefits Remote and flexible learning Industry-relevant curriculum Portfolio development opportunities Practical project experience Mentoring and personalised feedback Career guidance and employability support Opportunity to develop skills sought by modern employers Entry Requirements A good level of written English Access to a computer and internet connection Motivation to learn and develop professionally Career Opportunities Upon successful completion, learners may pursue roles such as: Junior DevOps Engineer DevOps Engineer Cloud Support Engineer Platform Engineer Infrastructure Engineer Site Reliability Engineer (SRE) Build and Release Engineer Cloud Operations Engineer Systems Administrator Cloud Infrastructure Engineer Apply Today If you are looking to start a career in DevOps and want to gain practical experience while developing a professional portfolio, we would love to hear from you. Submit your application today and begin your journey towards a rewarding career in DevOps Engineering. We advertise this role across multiple UK locations - you only need to apply once and you'll be considered for all of them.

Join our digital revolution in NatWest Digital X In everything we do, we work to one aim. To make digital experiences which are effortless and secure. So we organise ourselves around three principles: engineer, protect, and operate. We engineer simple solutions, we protect our customers, and we operate smarter. Job description This role is based in the United Kingdom and as such all normal working days must be carried out in the United Kingdom. Join us as a Principal Engineer, Digital Assets This is an exciting and challenging role that will see you leading best practice for application development and software development life cycles within the bank as we innovate our digital asset capabilities With your architect and software engineer background, you'll be delivering software components to enable the delivery of platforms, applications and services for the bank You'll be recognised as a technical leader, as you lead the wider participation in internal and industry wide events, conferences and other activities What you'll do As a Principal Engineer, you'll be driving development software and tools to accomplish project and departmental objectives by converting functional and non-functional requirements into suitable designs. You'll play a leading role in planning, developing and deploying high performance robust and resilient systems for the bank, while leading engagements with senior stakeholders to explore and suggest appropriate technical solutions to achieve the required product features. You'll have the opportunity to develop your leadership skills as you manage the technical delivery of one or more software engineering teams, overseeing the quality of their work and making sure it meets the required technical standards. You'll also be: Overseeing the definition of the technical strategy and advising on product roadmaps and migration plans to achieve strategic goals Making sure that the bank's systems follow excellent architectural and engineering principles, and are fit for purpose Monitoring the technical progress against plans while safeguarding functionality, scalability and performance, and providing progress updates to stakeholders The skills you'll need You'll be an established architect and hands-on senior engineer with extensive financial technology experience and practical exposure to digital assets, Web3, distributed ledger technology, and blockchain solutions. You must be able to demonstrate a deep technical expertise and hands-on engineering experience, with the ability to lead through influence, set engineering direction, establish software development lifecycle standards, and drive innovation and operational excellence across teams. You'll also bring an AI-first mindset that extends beyond adding AI tools to existing workflows. You'll have experience and practical knowledge of how to build an agentic-enabled team, operating model, and engineering process, with AI embedded across design, build, test, deployment, and operations. This includes specification-driven development, structured context and prompt engineering, human-in-the-loop controls, and measurable assurance of AI-generated solutions. You'll also need: A track record of designing and delivering complex end-to-end solutions spanning data, integration, platforms, cloud, APIs and user-facing technologies A proven ability to make sound technical decisions when faced with ambiguity or as requirements, regulations, standards and market infrastructure evolve An action-oriented, delivery-focused and progressive mindset and approach that prioritises tangible outcomes and measurable impact and value To be highly skilled in validating designs, resolving complex engineering challenges and accelerating delivery A talent for developing people including line management responsibilities, leading and coaching direct and indirect reports, and amplifying your impact through others A demonstrated success in evaluating and adopting emerging technologies without compromising engineering fundamentals, security or control A practical background deploying, operating and managing production software using modern cloud technologies and DevSecOps practices

At Engine by Starling we are on a mission to find and work with leading banks all around the world who have the ambition to build rapid growth businesses, on our technology. Engine is Starling's software-as-a-service (SaaS) business, the technology that was built to power Starling Bank, and a year ago we split out as a separate business. Starling has seen exceptional growth and success, and a large part of that is down to the fact that we have built our own modern technology from the ground up. The Engine technology platform is now available to banks and financial institutions all around the world, enabling them to benefit from the innovative digital features, and efficient back-office processes that has helped achieve Starling's success. Our technologists are at the very heart of Engine and enjoy working in a fast-paced environment that is all about building things, creating new stuff, and disruptive technology that keeps us on the cutting edge of fintech. We operate a flat structure to empower you to make decisions regardless of what your primary responsibilities may be, innovation and collaboration will be at the core of everything you do. Help is never far away in our open culture, you will find support in your team and from across the business, we are in this together! The way to thrive and shine within Engine is to be a self-driven individual and be able to take full ownership of everything around you: From building things, designing, and discovering to sharing knowledge with your colleagues and making sure all processes are efficient and productive to deliver the best possible results for our customers. Our purpose is underpinned by five values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness. Hybrid Working We have a Hybrid approach to working here at Engine - our preference is that you're located within a commutable distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling - As a Security Engineer at Engine, you'll be working on helping to keep our infrastructure secure and compliant and our staff safe and productive. You'll be working on projects covering identity and access management, cloud and network security, vulnerability management, security monitoring, security hardening, compliance reviews, and more. It's a very varied role with lots of close interaction with the infrastructure, security engineering, cross-cutting and compliance teams. We are looking for an experienced Senior level GCP Security Engineer to join our established Security Engineering team, working closely with Information Security, Infrastructure and the various Engine Technology teams to make sure security is at the heart of all our technical processes. As our subject matter expert, you will take ownership of engineering the security foundations of our Google Cloud Platform environment. This is a hands-on role for a specialist with a proven track record of designing, building, and automating security controls specifically for GCP, including hardened GKE clusters. Engine by Starling engineers are excited about helping us deliver new features, regardless of what their primary tech stack may be. Hear from the team in our latest Blog or our case studies with Women in Tech. As a GCP Security Engineer, you will: Collaborate with stakeholders to define our Google Cloud security architecture (cloud identity, runtime security, security posture) Design, document, build and maintain a secure and scalable infrastructure on GCP using Infrastructure as Code Be part of the team responsible for safeguarding our systems, applications and data by ensuring secure user access, authentication and authorisation mechanisms are in place Engineer and automate technical controls within GCP to ensure and demonstrate continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actions Lead incident response efforts, including investigation and remediation of security breaches Support our internal security awareness and training programs, advocating the DevSecOps mindset that we have created across our technology teams Requirements We're open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. If you have an innate passion for security and care enough to find elegant solutions to difficult problems, we'd love to hear from you. What skills are essential: Mature understanding of cloud security architecture, with deep expertise in GCP and a proven track record Experience creating a GCP landing zone, configuring services such as organisation policies and VPC Service Controls A deep understanding of GCP IAM and its limitations Experience with service-oriented architecture using containers, distributed systems and immutable infrastructure on GCP (including GKE, Compute Engine, Shared VPC and Cloud SQL) Expertise in Kubernetes, securing clusters (GKE) and meshes (Cilium is preferable), networking best practices and RBAC implementation (CKA, CKS qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management on GCP - Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager - including cryptographic key ceremonies Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI/CD Experience configuring and utilising cloud-native security logging, monitoring and detection services Strong programming skills - in security we write our own scripts for automation in Python, Go and other languages while contributing to open-source tools so we can utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications The ability to document security requirements from various stakeholders Excellent problem-solving, communication and active listening skills with an innate passion for security The ability to identify security gaps and create solutions to minimise risk and impact to us A proactive approach to staying updated with the latest security threats, vulnerabilities and mitigation techniques Thorough understanding of the incident response process (preparation, identification, containment, eradication, recovery, lessons learned) What skills are desirable: In-depth knowledge of network security, including core routing and switching concepts (TCP/IP, BGP, VPNs), security controls (firewalls, WAFs, IDS/IPS), and practical experience designing hybrid connectivity between GCP and on-premise environments Experience with data-residency and regulated-workload controls such as Assured Workloads and Access Transparency, relevant to deploying per-market for different banks' regulators Hands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2, ISO 27001 and PCI DSS / 3DS Container security knowledge including container image provenance (e.g. Sigstore, Notary) with an in-depth knowledge of container runtimes, and an understanding of integrating security into the software development lifecycle Experience performing secure code reviews and security approvals, including the use of static and dynamic application security testing (SAST / DAST) tools Experience in cryptography management and enhancements Relevant security certifications such as ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty or GCP Professional Cloud Security Engineer The main part of our tech stack is listed below. We don't ask that you have experience in all of it, but if you do, that's great! Java, which makes up the majority of our backend codebase GCP and AWS - we're cloud-native Microservice-based architecture Kubernetes (GKE on GCP, EKS on AWS) TeamCity for CI/CD (with multiple production releases per day) Terraform and Grafana RDS and CloudSQL for PostgreSQL Our Interview Process: Interviewing is a two-way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team: Initial interview with an Engineer - 45 minutes Take-home technical test, to be discussed in the next interview . click apply for full job details

At Engine by Starling we are on a mission to find and work with leading banks all around the world who have the ambition to build rapid growth businesses, on our technology. Engine is Starling's software-as-a-service (SaaS) business, the technology that was built to power Starling Bank, and a year ago we split out as a separate business. Starling has seen exceptional growth and success, and a large part of that is down to the fact that we have built our own modern technology from the ground up. The Engine technology platform is now available to banks and financial institutions all around the world, enabling them to benefit from the innovative digital features, and efficient back-office processes that has helped achieve Starling's success. Our technologists are at the very heart of Engine and enjoy working in a fast-paced environment that is all about building things, creating new stuff, and disruptive technology that keeps us on the cutting edge of fintech. We operate a flat structure to empower you to make decisions regardless of what your primary responsibilities may be, innovation and collaboration will be at the core of everything you do. Help is never far away in our open culture, you will find support in your team and from across the business, we are in this together! The way to thrive and shine within Engine is to be a self-driven individual and be able to take full ownership of everything around you: From building things, designing, and discovering to sharing knowledge with your colleagues and making sure all processes are efficient and productive to deliver the best possible results for our customers. Our purpose is underpinned by five values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness. Hybrid Working We have a Hybrid approach to working here at Engine - our preference is that you're located within a commutable distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling - As a Security Engineer at Engine, you'll be working on helping to keep our infrastructure secure and compliant and our staff safe and productive. You'll be working on projects covering identity and access management, cloud and network security, vulnerability management, security monitoring, security hardening, compliance reviews, and more. It's a very varied role with lots of close interaction with the infrastructure, security engineering, cross-cutting and compliance teams. We are looking for an experienced Senior / Staff level GCP Security Engineer to join our established Security Engineering team, working closely with Information Security, Infrastructure and the various Engine Technology teams to make sure security is at the heart of all our technical processes. As our subject matter expert, you will take ownership of engineering the security foundations of our Google Cloud Platform environment. This is a hands-on role for a specialist with a proven track record of designing, building, and automating security controls specifically for GCP, including hardened GKE clusters. Engine by Starling engineers are excited about helping us deliver new features, regardless of what their primary tech stack may be. Hear from the team in our latest Blog or our case studies with Women in Tech. As a GCP Security Engineer, you will: Collaborate with stakeholders to define our Google Cloud security architecture (cloud identity, runtime security, security posture) Design, document, build and maintain a secure and scalable infrastructure on GCP using Infrastructure as Code Be part of the team responsible for safeguarding our systems, applications and data by ensuring secure user access, authentication and authorisation mechanisms are in place Engineer and automate technical controls within GCP to ensure and demonstrate continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actions Lead incident response efforts, including investigation and remediation of security breaches Support our internal security awareness and training programs, advocating the DevSecOps mindset that we have created across our technology teams Requirements We're open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. If you have an innate passion for security and care enough to find elegant solutions to difficult problems, we'd love to hear from you. What skills are essential: Mature understanding of cloud security architecture, with deep expertise in GCP and a proven track record Experience creating a GCP landing zone, configuring services such as organisation policies and VPC Service Controls A deep understanding of GCP IAM and its limitations Experience with service-oriented architecture using containers, distributed systems and immutable infrastructure on GCP (including GKE, Compute Engine, Shared VPC and Cloud SQL) Expertise in Kubernetes, securing clusters (GKE) and meshes (Cilium is preferable), networking best practices and RBAC implementation (CKA, CKS qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management on GCP - Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager - including cryptographic key ceremonies Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI/CD Experience configuring and utilising cloud-native security logging, monitoring and detection services Strong programming skills - in security we write our own scripts for automation in Python, Go and other languages while contributing to open-source tools so we can utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications The ability to document security requirements from various stakeholders Excellent problem-solving, communication and active listening skills with an innate passion for security The ability to identify security gaps and create solutions to minimise risk and impact to us A proactive approach to staying updated with the latest security threats, vulnerabilities and mitigation techniques Thorough understanding of the incident response process (preparation, identification, containment, eradication, recovery, lessons learned) What skills are desirable: In-depth knowledge of network security, including core routing and switching concepts (TCP/IP, BGP, VPNs), security controls (firewalls, WAFs, IDS/IPS), and practical experience designing hybrid connectivity between GCP and on-premise environments Experience with data-residency and regulated-workload controls such as Assured Workloads and Access Transparency, relevant to deploying per-market for different banks' regulators Hands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2, ISO 27001 and PCI DSS / 3DS Container security knowledge including container image provenance (e.g. Sigstore, Notary) with an in-depth knowledge of container runtimes, and an understanding of integrating security into the software development lifecycle Experience performing secure code reviews and security approvals, including the use of static and dynamic application security testing (SAST / DAST) tools Experience in cryptography management and enhancements Relevant security certifications such as ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty or GCP Professional Cloud Security Engineer The main part of our tech stack is listed below. We don't ask that you have experience in all of it, but if you do, that's great! Java, which makes up the majority of our backend codebase GCP and AWS - we're cloud-native Microservice-based architecture Kubernetes (GKE on GCP, EKS on AWS) TeamCity for CI/CD (with multiple production releases per day) Terraform and Grafana RDS and CloudSQL for PostgreSQL Our Interview Process: Interviewing is a two-way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team: Initial interview with an Engineer - 45 minutes Take-home technical test, to be discussed in the next interview . click apply for full job details

We're looking for an experienced DevOps / Platform Engineer to help design, automate, and support modern cloud-based platforms and software delivery pipelines. You'll work within Agile delivery teams to improve deployment reliability, operational resilience, and engineering efficiency while driving DevOps best practices across the organisation. Key Responsibilities Design, build, and maintain CI/CD pipelines and automated deployment processes. Provision and manage cloud infrastructure using Infrastructure as Code. Develop automation solutions to improve delivery speed, reliability, and scalability. Support containerised and cloud-native environments using Kubernetes and Docker. Implement monitoring, logging, observability, and alerting solutions. Promote DevSecOps practices, security controls, and operational excellence. Collaborate with engineers, architects, testers, and product teams to deliver high-quality software. Lead troubleshooting, incident management, and continuous improvement initiatives. Skills & Experience Experience with AWS, Azure, or GCP. Strong knowledge of CI/CD tools such as GitLab, Jenkins, GitHub Actions, or Azure DevOps. Hands-on experience with Terraform, CloudFormation, AWS CDK, or Bicep. Knowledge of Docker, Kubernetes, OpenShift, and container orchestration. Scripting skills in Python, Bash, PowerShell, Node.js, or TypeScript. Experience with monitoring and observability tools such as Grafana, Prometheus, Splunk, ELK, or CloudWatch. Strong understanding of DevSecOps, networking, cloud architecture, and Agile delivery. Leadership Responsibilities Provide technical leadership across DevOps and platform engineering initiatives. Mentor and support engineers within the team. Define and champion engineering standards, automation practices, and cloud strategies. Contribute to architecture reviews, technical governance, and delivery planning. Act as a subject matter expert for cloud, automation, and software delivery practices.

Build & Deployment Engineer - C#/.NET, Octopus Deploy & Secure Coding City of London - Hybrid (4 Days on-site, 1 day WFH each week) Inside IR35 Contract Are you a build and deployment engineer who can open up the C# code behind a pipeline and fix it yourself? That combination is exactly what's needed here. You'll join the Platform Engineering function of one of the world's largest financial groups, owning the on-premises toolchain that takes software from source code to production. GitHub Enterprise, TeamCity, JFrog Artifactory and Xray, and Octopus Deploy, all integrated with ServiceNow change and vulnerability management. In a regulated banking environment, every build and deployment has to be secure, repeatable, traceable and auditable - and making that happen is your job. Alongside the platform work, you'll take technical ownership of secure coding standards: turning security policy into practical engineering controls that development teams inherit by default, rather than having to build for themselves. There's also a live migration of applications from legacy tooling onto Octopus Deploy to get stuck into. What You'll Be Doing Engineering, administering and supporting the on-premises build, packaging, artefact and deployment toolchain Building and maintaining automated CI/CD pipelines and standard templates for application teams, across Windows and Linux environments Writing, reviewing and troubleshooting the C#/.NET code behind internal deployment integrations, APIs and automation tooling Diagnosing complex build and deployment failures across code, dependencies, build agents, artefact repositories and target environments Migrating applications from legacy deployment tooling onto Octopus Deploy Defining and embedding pipeline security controls - SAST, SCA, dependency scanning, secrets detection and artefact scanning (GitHub CodeQL, Dependabot, JFrog Xray and Curation) Managing software supply-chain controls: approved repositories, open-source governance, package lifecycle, traceability and SBOM Integrating deployment automation with change and release management, including segregation of duties and audit evidence Working with Cyber Security, Risk and Control and development teams to onboard applications and remediate vulnerabilities Supporting platform upgrades, patching, resilience, DR, monitoring and incident response What You'll Bring Strong hands-on experience of enterprise software build, packaging and deployment engineering Strong C# development skills and a solid understanding of .NET Framework and modern .NET build and deployment - this is essential Practical experience with Visual Studio, MSBuild, NuGet, IIS, Windows services and REST APIs Administration or engineering experience with at least two of: Octopus Deploy, TeamCity, GitHub Enterprise, JFrog Artifactory, JFrog Xray, Azure DevOps Server Strong PowerShell, plus working knowledge of Bash/shell scripting Good understanding of Git workflows, artefact repositories, package versioning and environment promotion Experience implementing secure coding controls (SAST, SCA, secrets detection) and a good grasp of secure development principles, including authentication, secrets management, certificates and TLS Windows Server and on-premises hosting knowledge, working knowledge of Linux deployment patterns, and SQL Server database deployment (e.g. DACPAC) Experience working within formal change, incident and release management in a controlled, regulated environment Desirable: ASP.NET/ASP.NET Core, Entity Framework, NUnit/xUnit, ServiceNow integration, Terraform, Docker/Kubernetes, OWASP, SBOM standards, CyberArk This is a chance to own the build and deployment platforms at the heart of a top-tier financial services technology function, and to shape how secure coding is done across it. Click apply now to submit your CV, or get in touch for a confidential conversation about the role before you do. If you've held any of these roles or used these technologies/skills, this role could be a great fit: Build Engineer, Release Engineer, Deployment Engineer, Build & Release Engineer, DevOps Engineer, DevSecOps Engineer, CI/CD Engineer, Platform Engineer, Software Configuration Manager, Release Manager, Application Security Engineer, .NET Developer, C# Developer, Octopus Deploy Engineer, TeamCity Administrator, JFrog Artifactory Administrator, GitHub Enterprise Administrator, Azure DevOps Engineer, PowerShell Automation Engineer. Deerfoot Recruitment Solutions Ltd is a leading independent tech recruitment consultancy in the UK. For every CV sent to clients, we donate £1 to The Born Free Foundation. We are a Climate Action Workforce in partnership with Ecologi. If this role isn't right for you, explore our referral reward program with payouts at interview and placement milestones. Visit our website for details. Deerfoot Recruitment Solutions Ltd acts as an Employment Business in relation to this vacancy.

Senior DevSecOps Engineer £600 - £700 per day London 2 days per week onsite This is an opportunity to join a high-profile greenfield platform programme within a large enterprise software environment. You'll play a key role in shaping a secure, scalable cloud platform from the ground up, helping establish best practices, security guardrails, and modern DevOps capabilities that will support enterprise clients worldwide. The Company They are a global technology organisation investing heavily in the development of a next-generation cloud platform within their Environmental Health & Safety product portfolio. The programme is focused on building a modern, enterprise-grade solution using cloud-native technologies and microservices architecture. As the platform evolves, there is potential for the wider engineering function to expand, creating a dynamic and collaborative environment for contractors to make a lasting impact. The Role and Deliverables Design, implement, and support secure CI/CD pipelines for a cloud-native platform. Develop and maintain Terraform and Infrastructure as Code solutions to support platform scalability and consistency. Build and optimise Kubernetes-based environments on Azure. Define and implement enterprise-level security guardrails across infrastructure and application delivery processes. Support a microservices-based architecture, ensuring security, reliability, and operational excellence. Drive code review practices and automated security validation throughout the software development lifecycle. Your Skills & Experience Strong experience working as a DevSecOps Engineer within enterprise environments. Proven capability delivering solutions on Microsoft Azure. Hands-on expertise with Kubernetes in production environments. Strong knowledge of Terraform and Infrastructure as Code principles. Experience designing and supporting CI/CD pipelines. Understanding of cloud security, compliance controls, and secure engineering practices. Experience implementing automated security checks and secure code review processes. Familiarity with microservices-based platforms and modern cloud-native architectures. Ability to work effectively with engineering teams to embed DevSecOps best practices. How to Apply If you're a Senior DevSecOps Engineer with strong Azure, Kubernetes, Terraform, and security expertise, apply today to discuss this exciting contract opportunity.

Security Solutions Architect Must be eligible for SC Clearance. Remote based opportunity. Paying between £90,000-100,000, depending on experience. We are working with a leading UK provider of managed IT, cloud, connectivity and cyber security services to recruit an experienced Security Solutions Architect. This is a senior technical role offering the opportunity to influence the design and development of security solutions and managed services across a large and established technology environment. The Role As a Security Solutions Architect, you will act as a technical authority for security architecture, translating customer, business and regulatory requirements into secure, scalable and commercially viable solutions. You'll work across cyber security, cloud, networking, infrastructure and identity, collaborating closely with Product, Engineering, Security, Delivery and Operations teams. This is an excellent opportunity for someone who wants to remain technically close to security while having the seniority to shape architecture, challenge designs and influence technical direction. You'll also play an important part in developing reusable security solutions, technical standards and future security roadmaps. Key responsibilities: Designing and assuring security solutions across cloud, networks, infrastructure, identity and managed security services. Producing high-level designs, reference architectures, security patterns and technical roadmaps. Acting as a technical design authority and providing architectural guidance. Leading security architecture and technical design reviews. Identifying security risks, control gaps and architectural dependencies. Supporting the development of new and existing managed security products and services. Ensuring solutions are secure, resilient, scalable and operationally supportable. Working with Engineering and Operations teams to successfully transition solutions into service. Supporting customer workshops, technical reviews, bids and pre-sales activities. Providing technical guidance and mentoring to engineers and other technical colleagues. Experience required: We are looking for an experienced security professional with a background in Security Architecture, Security Engineering or senior Security Consultancy. Experience across several of the following would be particularly relevant: Security architecture within an MSP, MSSP, telecommunications, cloud, systems integrator or complex enterprise environment. Cloud security across Azure and/or AWS. Identity security, Zero Trust and Privileged Access Management. Network, endpoint and infrastructure security. SOC, SIEM, SOAR, EDR, NDR or XDR technologies. Vulnerability management and security monitoring. Threat modelling, risk assessment and security governance. DevSecOps, Infrastructure as Code or security automation. Designing secure, resilient and auditable services. Security frameworks including ISO 27001, NIST, CIS Controls, Cyber Essentials Plus and NCSC guidance. Relevant certifications such as CISSP, CCSP, CISM, Microsoft Security, AWS Security or TOGAF are desirable, although strong practical experience will be considered equally. Must be eligible for SC Clearance. Remote based opportunity. Paying between £90,000-100,000, depending on experience.

Head of Information Security - CISSP, CISM, ISO27001, NIST, PCI DSS, GDPR, DevSecOps, Cloud Security, SIEM, SOC, AI Security. Permanent, West London, 4/1 Hybrid. c.£100k +Benefits Head of Information Security / CISO / Senior InfoSec Consultant required to lead and develop a modern, security-first function within a growing technology business. Reporting to the CTO, you'll combine strategic leadership with a hands-on technical approach, working closely with Engineering, Infrastructure and Operations teams to embed security across the organisation. The role will adopt Information Security strategy, governance, risk and compliance while implementing practical security controls, automation and DevSecOps best practice. This is an excellent opportunity to influence technology strategy, lead security initiatives and help shape a mature, AI-enabled security capability whilst remaining hands-on in the early stages. In time, you will build a small team of InfoSec and Cyber Security Analysts around you. Key Responsibilities: Define and deliver the Information Security strategy, policies and governance framework. Define and develop robust security controls inline with both business practices and compliance requirements inc ISO27001, CE+, SOC2, NIST CSF, GDPR and PCI DSS. Embed Secure by Design and DevSecOps principles across engineering teams. Lead cyber risk management, incident response, threat modelling and vulnerability management using a range of contemporary tools. Drive AI and automation to enhance security operations and threat detection. Oversee third-party security, supplier assurance and client audits. Recruit, mentor, lead and develop the Information Security team. As such we're looking for candidates with experience leading Information Security or Cyber Security functions within technology-led organisations. You will possess: CISSP, CISM or equivalent security certification. Strong knowledge of ISO27001, NIST, PCI DSS, GDPR and Information Security Governance. Experience developing security strategy, GRC and cyber risk programmes including definition of security controls Strong technical knowledge across cloud, network, endpoint, application and data security. Experience with SIEM, SOC, vulnerability management and incident response. Knowledge of DevSecOps, security automation and modern cloud environments. Excellent communication, stakeholder management and leadership skills. You may have been working as a CISO, Information Security Manager, Cyber Security Consultant or within another senior InfoSec/CyberSec capacity which has granted you experience in both security control definition and hands-on practical management of security threats and incidents including vulnerability scanning and penetration testing. This is an outstanding opportunity to join a forward-thinking medium sized global organisation where you'll shape the security strategy, influence technology direction and build a modern Information Security function using the latest cloud, automation and AI technologies. Location is commutable from West London, Middlesex, East Berkshire, North Surrey, South West London and parts of South London (Croydon etc). Accessible via District Line (West) and some mainline services.

DevOps Engineer (Cyber Security) Lutterworth - 2 Days on site 3 from home £50,000 - £60,000 + Hybrid + Training + Progression + Company Benefits Are you a DevOps Engineer from a cyber security or highly regulated industry that wants to work with a highly skilled team on cutting edge projects? Do you want to work for a industry leading company with exceptionally talented team solving some of the industry's most complex and technical challenges and that will put you through security clearance? On offer is the chance to join a leader in the cyber security industry that are widely considered as the go to name for highly secure and complex infrastructure projects not only in the UK but globally. This role would suit someone with commercial experience in DevOps, a commutable distance to Lutterworth and wants to work in cyber security or DevSecOps. THE ROLE: Design, implement and maintain automated pipelines for building, testing and deploying applications Cloud & On-Prem Application Management - Administer and optimise Azure and on premises application systems Set up and maintain monitoring solutions across DevOps and Application Software deployed across the business Implement security best practices across infrastructure and deployment processes. Ensure systems meet compliance requirements THE PERSON: DevOps Experience Commutable to Lutterworth 2 days a week Reference: BBBH26730 If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV. We are an equal opportunities employer and welcome applications from all suitable candidates. The salary advertised is a guideline for this position. The offered renumeration will be dependent on the extent of your experience, qualifications, and skill set.

Technology Lead - AWS Modernisation Programme 6-Month Contract Outside IR35 £400-£450 per day Fully Remote We're supporting a consultancy delivering a major cloud transformation programme and are looking for an experienced Technology Lead to drive the modernisation of a large-scale enterprise application estate. This is a hands-on leadership role combining solution architecture, software engineering, cloud transformation, DevOps and stakeholder engagement. You'll lead the transition from legacy Java applications to modern AWS-native services, helping define the target architecture while providing technical leadership across engineering and delivery teams. The Role You'll be responsible for shaping and delivering a cloud-native modernisation strategy, guiding applications from monolithic architectures to scalable microservices and serverless solutions on AWS. Working closely with technical and business stakeholders, you'll lead architecture decisions, mentor engineering teams and provide hands-on support across application, platform and database modernisation activities. Key Responsibilities Architecture & Modernisation Lead end-to-end application modernisation initiatives across complex enterprise environments. Define target-state architecture, technical standards and delivery roadmaps. Drive adoption of microservices, event-driven architectures and API-first design principles. Conduct architecture reviews and ensure solutions meet security, scalability and operational requirements. Provide technical leadership throughout discovery, design, build and migration phases. AWS Engineering Design and implement solutions using AWS services including ECS, Fargate, Lambda, API Gateway, EventBridge, SQS and SNS. Deliver containerised and serverless workloads following cloud-native best practices. Define monitoring, observability, security and resilience standards. Support troubleshooting, performance optimisation and production readiness activities. Software Development Provide hands-on technical leadership across Java, Spring Boot and modern application development practices. Review code, establish engineering standards and mentor development teams. Guide the design of distributed systems, integrations and scalable application architectures. Support proof-of-concepts, technical investigations and critical delivery challenges. Data & Database Engineering Design and optimise solutions using DynamoDB, PostgreSQL and AWS database services. Support database migration, performance tuning and operational best practices. Develop scalable data models and ensure solutions meet performance and resilience requirements. Provide guidance on selecting appropriate database technologies based on business needs. DevOps & Automation Drive CI/CD adoption and automation initiatives. Implement Infrastructure as Code using Terraform and/or CloudFormation. Establish release, deployment and environment management processes. Promote DevSecOps practices across development and operations teams. Stakeholder Engagement Act as the primary technical lead for customer-facing discussions. Run workshops, architecture reviews and technical design sessions. Communicate technical decisions and project progress to both technical and non-technical stakeholders. Provide mentorship and leadership across multidisciplinary delivery teams. Essential Experience Strong AWS architecture and engineering experience. Enterprise application modernisation and cloud migration projects. Java and Spring Boot development background. Microservices and event-driven architecture design. Containerisation using Docker, ECS and Fargate. Serverless technologies including Lambda and API Gateway. DynamoDB and PostgreSQL database design and optimisation. CI/CD, DevOps and Infrastructure as Code. Terraform and/or CloudFormation. Technical leadership and stakeholder management experience. Comfortable operating in both strategic and hands-on delivery capacities. Desirable Experience AWS certifications. Experience leading large-scale transformation programmes. Consultancy or client-facing delivery experience. Exposure to high-volume enterprise environments such as financial services, logistics, retail or manufacturing. Contract Details 6-Month Initial Contract Outside IR35 £400-£450 per day Fully Remote Immediate interview availability preferred. This is an excellent opportunity for a senior Technology Lead or Solution Architect who enjoys combining technical leadership with hands-on engineering to deliver impactful cloud transformation programmes.

Build & Deployment Manager - JFrog Artifactory 4 days onsite - Inside IR35 Our client, a leading global financial services organisation, is looking for an experienced Build & Deployment Manager to join its engineering function and take ownership of secure software delivery and supply-chain controls across a complex, regulated technology environment. This is a hands-on engineering role , focused on building, administering and continuously improving enterprise DevSecOps capabilities. You'll work across JFrog Artifactory and Xray, GitHub Enterprise, CI/CD platforms and ServiceNow , helping development teams build, secure, package, deploy and manage software through repeatable, auditable pipelines. The Role You'll provide technical ownership of secure software supply-chain controls across the organisation. You'll work closely with engineering, security and application teams to embed appropriate security controls into delivery pipelines without creating unnecessary friction. Your responsibilities will include: Administering and supporting JFrog Artifactory and Xray , including repositories, permissions, package promotion, build information, retention policies and scanning. Designing, implementing and supporting secure CI/CD pipelines across multiple technology stacks. Managing GitHub Enterprise , including repositories, branching, pull requests, permissions, releases and integration with security/build tooling. Embedding security controls including SAST, software composition analysis, dependency and artefact scanning, secrets detection, SBOM generation and policy-based gates. Managing vulnerabilities from initial discovery and technical triage through ownership, prioritisation, remediation, validation and evidence-based closure. Integrating vulnerability and software asset information with ServiceNow , supporting accurate application/service mapping and remediation tracking. Automating processes using PowerShell, Bash, Python or equivalent , REST APIs and configuration-as-code. Supporting build and deployment technologies such as TeamCity, Octopus Deploy, GitHub Actions and Azure DevOps . Troubleshooting complex issues across source control, pipelines, dependencies, build agents, repositories, security tooling, deployment platforms and target environments. Producing technical designs, reusable pipeline standards, operating procedures, support documentation and audit evidence. Working within formal change, incident, problem, release and vulnerability-management processes. What We're Looking For We're seeking an engineer with strong practical experience in DevSecOps, platform engineering or enterprise build and release engineering , ideally gained within a complex or regulated environment. You should have: Strong hands-on experience with JFrog Artifactory and Xray . Proven experience designing and supporting secure CI/CD pipelines . Strong knowledge of GitHub Enterprise and modern source-control practices. A good understanding of artefact repositories, package managers, dependency management, immutable artefacts, provenance and controlled promotion. Practical knowledge of secure coding, OWASP , application vulnerabilities and remediation approaches. Experience managing vulnerabilities throughout their complete lifecycle. Experience integrating security/vulnerability tooling with ServiceNow , ideally Vulnerability Response or Application Vulnerability Response. Strong scripting and automation skills, alongside experience working with REST APIs and configuration-as-code. Working knowledge of Windows and Linux build agents , credentials, certificates, TLS, secrets management, logging and access controls. The ability to investigate and resolve complex technical issues across the software delivery lifecycle. Experience with JFrog Advanced Security/Curation, GitHub Advanced Security, CodeQL, Dependabot, Terraform, Docker, Kubernetes, SBOMs, software signing/attestation or cloud-native platforms would be highly advantageous. Knowledge of Java, .NET, JavaScript/TypeScript, Python or Go is useful, but this is not an application-development role. We're primarily interested in your ability to understand different development ecosystems and engineer secure, reliable delivery processes. Build & Deployment Manager - JFrog Artifactory Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted. Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website

Staff Software Engineers (TypeScript / Agentic AI) UK Remote or Hybrid £100k + Benefits Must Have Criteria - These roles do not offer Visa Sponsorship - Circa 5+ years' experience working with TypeScript - Must have worked with Agentic AI. Your new company This rapidly growing SaaS technology business has established itself as one of the UK's leading B2B software success stories. Combining the agility of a scale-up with the stability of a profitable, privately owned organisation, the company has built an engineering-first culture where technology investment remains a core strategic priority. Unlike many software businesses, the engineering teams are not constrained by significant legacy technology. Instead, developers work within a modern cloud-native environment, leveraging best-in-class engineering practices and a genuine DevOps culture where software is deployed multiple times per day. These Staff Engineer roles can be offered hybrid in one of their UK hubs or can be worked UK remote (once per quarter office visit). It's about finding the right people and enabling them to thrive rather than dictating working patterns. Your new role This is an organisation experiencing significant growth across its engineering function. As part of that expansion, they are recruiting multiple Software Development Managers alongside several Staff Engineers, creating an excellent opportunity to join at a pivotal stage of the company's continued growth. You'll be working alongside some of the strongest technical talent in the business whilst helping shape the next phase of engineering maturity and scale. As a Staff Engineer, you'll operate as one of the technical leaders within the engineering organisation, working across architecture, solution design, product delivery and software quality. This is a hands-on technical leadership role where you'll take ownership of complex engineering challenges whilst influencing technical direction across multiple teams. You'll work closely with stakeholders on solution design, requirements gathering and architecture decisions, helping shape products from concept through to deployment. You'll prototype and explore new approaches where appropriate, support Product teams with breaking down work into deliverable outcomes and ultimately turn ideas into high-quality software running in production. The role sits within a modern TypeScript environment utilising Node.js microservices, Vue, Redis, SQL Server and SingleStore, all deployed within AWS following DevSecOps principles. Engineering teams deploy to production daily and take ownership of the products they build throughout their lifecycle. The organisation is investing heavily in next-generation product capabilities, particularly around AI-driven development and Agentic AI. As a result, you'll have the opportunity to influence how modern AI technologies are used to accelerate software delivery and create better customer outcomes. What you'll need to succeed We're looking for proven Senior / Lead / Principal / Staff level Engineers leaders who are passionate about working hands-on building best-in-class SaaS products. You'll have extensive commercial experience developing software within Full Stack TypeScript environments (roughly 5+ years) and be comfortable owning architecture, design decisions and implementation within complex production systems. Experience with Node.js, NestJS, Vue, Redis, SQL Server, SingleStore, automated testing, software security, scalable distributed systems and cloud-native development (Github on AWS) complete the wider stack. We're looking for a strong understanding of clean code principles, SOLID design patterns and modern engineering practices. You'll have experience working within mature CI/CD and DevOps teams and in a high-throughput, big data, microservices environment. Experience delivering Agentic AI capabilities is also essential. This could include AI agents, autonomous workflows, LLM-powered applications, orchestration frameworks, RAG implementations or similar AI-driven product functionality. Strong stakeholder engagement skills are also important, as you'll regularly work with Product teams, engineering leadership and business stakeholders to shape solutions and drive technical outcomes. What you'll get in return You'll join an organisation that is fully self-funded with owners that really believe in an Engineering-first culture and are investing heavily into the department. You'll receive a salary up to £100k, 25 days' plus bank holidays enhanced pension scheme (and salary sacrifice coming soon), plus budget for training courses/certifications and to invest in the latest tools in industry. What you need to do now To find out more and to be considered for this position please apply directly, or contact Max Wilcock, Business Director on . At Hays Technology, we are shaping the future of recruitment. The rapid adoption of cloud, which is making customer interfaces more engaging and creating a seamless engagement with businesses, means that from the foundation of your organisation up, software developers are critical to success. As the competition for talent grows, we're ready and waiting to help developers really make an impact on organisations, so talk to us today. We are Hays Technology. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk

Security Engineer / Security Consultant (Application Security & Threat Modelling) Rate - £550 - £650 Outside IR35 Duration - 6 months initial Location - Bristol / London (once a week / remote) Role overview: A leading Financial Services is seeking an experienced Security Engineering Consultant on a contract basis. The successful candidate will be embedded within engineering tribes, providing security consultancy and guidance to development teams throughout the software development lifecycle. The primary focus of the role is threat modelling. The consultant will conduct threat models for new and existing products, identify risks at the design stage and work with developers to mitigate those threats during development, ensuring that products are secure by design. Key responsibilities: Conduct and document threat models across products and services, from initial design through to delivery Work with development teams to mitigate identified threats during development Provide security consultancy and guidance to engineers, product owners and architects Embed secure development practices across the SDLC and support the adoption of DevSecOps Support application security activities, including secure design reviews and security testing Manage and improve vulnerability management processes, supporting teams with prioritisation and remediation Produce threat modelling diagrams and supporting documentation for use by delivery teams Support the development of security knowledge within engineering teams Essential requirements: Significant experience in threat modelling - experience using IriusRisk or comparable threat modelling tools Experience in application security, with detailed knowledge of OWASP standards and web application security Experience of DevSecOps practices, including integrating security controls into CI/CD pipelines Knowledge of the secure SDLC within agile delivery environments Experience of vulnerability management Working knowledge of Kubernetes and container security The ability to communicate security risks clearly to technical and non-technical stakeholders Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.