Lead DevSecOps Engineer

Join Arondite as a Lead DevSecOps Engineer, where you will drive platform engineering and developer experience. You will take full ownership of our internal development ecosystem, design and maintain the "Golden Path," and engage with stakeholders to build a DevSecOps roadmap. You will also support and mentor less experienced engineers, manage infrastructure-as-code practices, and own automated security tooling. This role offers a highly competitive salary, generous equity options, comprehensive health and dental insurance, and an unlimited holiday policy.

• Assumer la responsabilité complète de l'écosystème de développement interne, en l'évoluant vers une plateforme sécurisée, robuste et autonome.
• Concevoir et maintenir le "Golden Path", la route standardisée et automatisée du code local à un état prêt pour la production.
• Diriger l'adoption de méthodologies de déploiement modernes (comme GitOps) pour garantir une gestion d'état déclarative, reproductible et auditable.
• Evidence of delivering security compliance (e.g. UK government ‘Secure by Design’) as a key component of development tooling
• Proven ability to manage container orchestration at scale with Kubernetes, focusing on abstracting complexity for end-users rather than just "managing clusters."
• 3+ years of experience building or scaling internal developer platforms or sophisticated CI/CD ecosystems
• Expert-level proficiency in declarative configuration management and modular Infrastructure as Code design (e.g., Terraform, OpenTofu, or Pulumi)
• Strong competency in scripting or systems programming (Python, Go, or Bash) to glue disparate systems into a unified platform
• Deep understanding of cloud-native primitives (Compute, Networking, Storage) and the ability to implement them across different providers or hybrid environments
• Experience maintaining and scaling critical engineering tools (e.g., GitLab, Artifactory, or SonarQube) at the enterprise level, including backup/restore and high-availability strategies
• Proven experience migrating workloads between platforms (e.g., EC2 to EKS, or cross-cloud) with a focus on data integrity and minimal downtime
• Ability to implement standardized telemetry pipelines (e.g., OpenTelemetry, Prometheus, or ELK) that provide developers with out-of-the-box visibility into their services
• Experience implementing automated cost-attribution and rightsizing logic to ensure the platform remains economically sustainable as it scales
• Familiarity with automated policy enforcement and compliance-as-code (e.g., OPA, Kyverno, or AWS Config) to maintain compliance without manual intervention
• Experience with deploying software to classified environments and/or meeting UK Government security requirements
• Knowledge of service mesh architectures such as Istio or Linkerd, for traffic management and mTLS
• We believe in working closely with defence customers. As a result, this role will require the individual to hold a clearance or be willing to undergo UK security vetting to Security Check (SC) or above. This normally requires having continuous residency in the UK for at least 5 years