DevX Build Pipeline/DevOps Engineer

Salary: £60,000 – 90,000 per year

Requirements

• 7 years of engineering experience, including 3 years in a CI/CD platform or DevSecOps role
• Strong Jenkins Groovy shared library expertise
• Advanced Python automation experience, including JSON/YAML processing and tooling scripts
• Deep Maven, NPM, and Python packaging knowledge
• Exposure to Helm, Terraform, and container image metadata
• Supply-chain security experience, including SLSA, CycloneDX SBOMs, and digests
• Experience with SonarQube, Sonatype IQ, container scanning, and SAST scanning
• Proven performance tuning experience, including caching, parallelization, and dependency pruning
• Compliance awareness
• Precise communication and documentation discipline
• Ownership mindset and ability to operate with minimal supervision
• Terraform module and Helm chart publishing patterns knowledge is nice to have
• GitOps or release automation experience is nice to have
• GCP or AWS cloud experience is nice to have
• Artifact signing and attestations experience, such as cosign and OCI, is nice to have

Responsibilities

• Own and evolve our Jenkins Shared Library powering multi-language builds across Java/Maven, Node/NPM, Python, Helm, Terraform, and containers
• Design and maintain Groovy pipeline steps for build, test, package, scan, and deploy
• Extend our Python tooling for SLSA provenance, SBOM generation, hash and digest accuracy, and security scan aggregation
• Optimize pipeline performance through parallel builds, caching, scope-reduced BOMs, and dependency prefetching
• Ensure artifact integrity through correct SHA1/SHA256 mapping, reproducible inputs, and evidence modeling
• Refactor legacy scripts by removing global state, consolidating hashing, and standardizing templates
• Document ci-config.yaml standards and usage patterns
• Mentor engineers on secure pipeline development and supply‑chain practices
• Troubleshoot and prevent pipeline incidents
• Assess the current shared library structure and supporting modules during the first 30 days
• Work through user‑reported issues to understand critical parts of the pipeline and configuration options
• Identify bugs, classify them, and develop hot fixes
• Deliver small features and improvements to the pipeline code

Technologies

• AWS
• CI/CD
• Cloud
• DevSecOps
• GCP
• GitOps
• Groovy
• Helm
• JSON
• Java
• Jenkins
• Maven
• NPM
• Python
• Security
• Terraform
• NodeJS
• DevOps
• Support

More

We are offering a contract role running until 30/11/2026, based in a hybrid setup in Sheffield with 3 days onsite and additional travel to other UK offices. The role is inside IR35, with a rate of up to £538.20 per day via umbrella.

last updated 38 week of 2026

#J-18808-Ljbffr…