Senior DevSecOps Engineer

Senior DevSecOps Engineer Location : London | Practice Area: Technology & Engineering | Type: Permanent Build the platforms that power secure, intelligent and scalable enterprise engineering. The Role At Capco, we're looking for a Senior DevSecOps Engineer to help design, build and modernise enterprise software delivery capabilities for leading financial services organisations. You'll play a key role in developing a modern enterprise Software Development Lifecycle (SDLC) platform, with a focus on CI/CD automation, policy-as-code, security controls and cloud-native engineering. This is a hands-on engineering opportunity where you'll translate architecture into production-ready capabilities, integrate complex enterprise technologies and support engineering teams in adopting scalable, secure delivery practices. You'll also explore approved AI-enabled engineering tools and workflows to improve development productivity, automation and delivery quality, while maintaining appropriate human oversight, security controls and responsible AI practices. What You’ll Do • Build modern CI/CD platforms: Design, develop and implement enterprise GitLab SaaS CI/CD pipelines, reusable engineering patterns and automated workflows, leveraging approved AI-assisted engineering capabilities where appropriate to improve efficiency and quality. • Embed security and governance: Implement policy-as-code, automated security and quality gates, change controls, SAST, DAST, secrets management and vulnerability management throughout the SDLC. • Engineer cloud-native solutions: Build and integrate services across Azure, Kubernetes and Azure API Management, supporting application, cloud and data workloads, including Snowflake and Salesforce. • Modernise enterprise engineering environments: Support migrations from legacy Jenkins, GitLab, SonarQube, Artifactory/Nexus and AWS environments, integrating observability capabilities using Grafana and Prometheus. • Enable engineering teams: Translate target architecture into working production capabilities, develop reusable platform services and onboard engineering teams, promoting responsible AI-enabled workflows with appropriate review, auditability and human decision-making. What We’re Looking For • GitLab and Azure expertise: Extensive hands-on experience designing, building and operating enterprise GitLab CI/CD pipelines and Azure-based engineering solutions. • Cloud-native engineering: Strong practical experience with Kubernetes, DevSecOps principles, infrastructure automation and policy-as-code. • Security and governance integration: Experience embedding identity, security controls, automated testing, quality gates and compliance requirements into enterprise delivery pipelines. • Enterprise modernisation: Demonstrated experience modernising complex engineering environments, integrating multiple technologies and delivering scalable, production-ready platform capabilities. • Technical leadership and delivery: Ability to take architectural designs through implementation, collaborate with engineering teams and support knowledge transfer, with an interest in applying approved AI tools and automation responsibly to improve engineering outcomes. Bonus Points For • Experience integrating Azure API Management with cloud-native platforms and enterprise applications. • Familiarity with Snowflake, Salesforce and engineering patterns supporting data-intensive workloads. • Experience migrating from Jenkins, SonarQube, Artifactory/Nexus or AWS-based engineering environments. • Knowledge of Grafana, Prometheus and enterprise observability practices. • Experience using AI-assisted development tools or AI-enabled DevSecOps workflows, with an understanding of responsible AI, human review and appropriate security