Lead DevSecOps Engineer

About the role

Arondite builds foundational software that lets operators orchestrate platforms and make mission-critical decisions faster, and it is backed by investors including Index Ventures. As Lead DevSecOps Engineer you will drive platform engineering and developer experience, taking full ownership of the internal development ecosystem and turning it into a secure, self-service platform that abstracts infrastructure complexity. You will also build a team, set the technical direction and mentor less experienced engineers.

Key responsibilities

• Take end-to-end ownership of the internal developer platform and build automated solutions to bottlenecks in the secure software development lifecycle
• Architect standardized deployment patterns that embed security, compliance and observability
• Ensure high availability and seamless integration of the self-hosted GitLab engineering suite
• Manage infrastructure-as-code practices so infrastructure is version-controlled, auditable and reproducible
• Drive adoption of GitOps and other modern deployment methodologies
• Own automated security tooling such as SAST, DAST, dependency and container scanning and secrets detection
• Build a DevSecOps roadmap and mentor junior engineers

Required profile

• 3+ years of experience building or scaling internal developer platforms or sophisticated CI/CD ecosystems
• Deep understanding of cloud-native compute, networking and storage, across providers or hybrid environments
• Proven ability to run Kubernetes at scale, abstracting complexity for users
• Evidence of delivering security compliance (e.g. Secure by Design, ISO 27001, NIST, SOC2) as part of development tooling
• Existing Right to Work in the UK at the time of application
• Willingness to hold a security clearance or undergo UK vetting to Security Check (SC) or above, which normally requires 5 years of continuous UK residency

Required skills

• Terraform, OpenTofu or Pulumi
• Python, Go or Bash
• GitLab, Artifactory or SonarQube maintenance and scaling (bonus)
• OpenTelemetry, Prometheus or ELK telemetry pipelines (bonus)
• OPA, Kyverno or AWS Config policy enforcement (bonus)
• Istio or Linkerd, classified environment deployments (bonus)

What we offer

• Competitive base salary and generous EMI share options
• 7% employer pension contribution
• Free daily meals, private health and dental insurance, cycle to work scheme
• Relocation support and access to resources, equipment and training

The process runs through a CV submission, introductory Teams call, leadership assessment, in-person technical interview and a final interview with a Founder.