DevSecOps Engineer

SC Cleared - DevSecOps / Security Platform Engineer • 6 month contract • Remote / London • Inside IR35 • SC Cleared Role Summary: We are seeking a skilled DevSecOps Engineer to manage and administer source code repository environments, code quality and security scanning tools, artifact repository management, infrastructure as code, and CI/CD pipelines. The role’s primary focus includes GitHub Cloud and Enterprise Server administration, integrating and maintaining static code analysis and security tools such as Sonarqube, Trivy, and Checkov, managing artifact repositories like Artifactory, and maintaining automation workflows using Terraform and GitHub Actions. You will be responsible for patching, updates, security hardening, and ensuring the overall security and reliability of development pipelines and platforms. Key Responsibilities: • Administer and maintain GitHub Cloud and GitHub Enterprise Server environments • Integrate and update code quality and security tools such as Sonarqube, Trivy, and Checkov • Manage artifact repositories (Artifactory), including access control and lifecycle policies • Develop, maintain, and patch infrastructure as code (Terraform) and CI/CD pipelines (GitHub Actions) • Ensure security compliance and timely patching of platform components and tools Collaborate with development, security, and operations teams to embed security practices throughout the software development lifecycle • Monitor and troubleshoot pipeline and platform issues to ensure reliability and performance • Document platform configurations, procedures, and best practices Required Skills & Experience: • Proven experience administering GitHub Cloud and/or Enterprise Server environments • Hands-on experience with static code analysis and security tools such as Sonarqube, Trivy, and Checkov • Experience managing artifact repositories, preferably Artifactory • Proficiency in Terraform and GitHub Actions for automation and infrastructure as code • Strong understanding of DevSecOps practices and security patch management • Good troubleshooting and problem-solving skills • Excellent collaboration and communication skills Preferred Qualifications: Relevant certifications in DevOps, cloud platforms, or security (e.g., Certified DevSecOps Engineer, AWS/Azure/GCP certifications) • Experience with container security and scanning tools • Familiarity with compliance standards relevant to software development security If you are available and interested in this opportunity, please apply for further information. Please note due to high volumes of applications we are unable to contact every application. If you do not hear back from us within 7 days of sending your application, please assume that you have not been successful on this occasion. At Lucid, we celebrate difference and value diverse perspectives, underpinned by our values ‘Honesty, Integrity and Pragmatism’. We are proud to provide equal opportunities in line with our Diversity and Inclusion policy and welcome applications from all suitably qualified or experienced people, regardless of personal characteristics. If you have a disability or health condition and seek support throughout the recruitment process, please do not hesitate to contact us via the details below.