Senior DevSecOps Engineer

Experience: 8 years Occasional travel to Gloucestershire, UK is required. Must have solid hands-on - on premise implementation experience. Cloud implementation is not the focus of this role. • 8+ years in DevOps / DevSecOps / SRE / Platform Engineering. • Strong Azure DevOps Pipelines (YAML, agents, releases). • Deploying and operating Spring Boot (Java) microservices. • Strong Windows Server administration and PowerShell. • Infrastructure-as-Code (Terraform, Ansible, PowerShell DSC, or similar). • SQL Server, MongoDB, RabbitMQ — automated deployments and upgrades. • Docker; working knowledge of Docker Compose and Kubernetes. • Security tooling: vulnerability scanners, image scanning, secrets vaults (HashiCorp Vault, Azure Key Vault). • Monitoring/observability: Prometheus/Grafana, Azure Monitor, ELK, Datadog, or equivalent. • Comfortable in a ticket-driven service model. • On-prem enterprise software delivery experience. Nice-to-Have • Certifications: AZ-400, CKA/CKS, CompTIA Security+, CISSP. Responsibilities: • Build and own Azure DevOps Pipelines for our Spring Boot microservices (build, test, scan, package, deploy). • Automate server provisioning for self-hosted Dev/QA and for customer on-prem production using Infrastructure-as-Code — no more manual server setup. • Automate end-to-end software upgrades (application + SQL Server + MongoDB + RabbitMQ) so releases promote Dev → QA → customer production via pipelines, not manual steps. • Containerize services with Docker; help standardize on Docker Compose and/or Kubernetes. • Bring creative automation ideas (self-service portals, GitOps, golden images, one-click customer installers) and implement them with governance — change control, approvals, RBAC, audit trails. • Stand up monitoring and alerting across Dev, QA, and customer production (CPU, service uptime, server health, DB growth, RabbitMQ queues). • Run security tooling in the pipeline — vulnerability scans, image scans, SCA/SAST/DAST, secrets management; harden Windows servers, DBs, and brokers. • Operate inside a ticket-driven service model with defined SLAs; act as the senior EU-hours point of contact for engineering and customer teams. • Mentor the India seniors and partner with the US Lead on architecture decisions.