Senior DevSecOps Engineer (AWS)

Who We Are Looking For We're looking for a Senior DevSecOps Engineer to join our small, high-impact team as the second-in-command (2IC) to the DevSecOps Lead. This isn't a role where you blend into the background — on a small team, everything you do is amplified. We're trusted by banks and other security-conscious organisations to handle sensitive data. The security, stability, and reliability of our operations is paramount. You're comfortable driving large initiatives to completion, navigating ambiguity, and making sound decisions without waiting for permission. You're a leader by default — whether or not it's in your title. You're also not afraid to get your hands dirty: wrangling Lambda functions, building Terraform configurations, and helping design and implement infrastructure for major new service capabilities. We are an AI-first organisation. Our engineering teams use Claude Code, and we're heavily invested in empowering both engineering and the wider business with AI tooling. You should be enthusiastic about leveraging AI to move faster and do more with less. You Have Minimum 5 years building and managing secure, highly available web applications and integration services in AWS. Experience with containerised services in AWS ECS — setup, security, management, and monitoring. A deep understanding of Terraform. Strong knowledge of AWS networking primitives. Experience building and maintaining CI/CD pipelines using GitHub Actions or similar platforms. Strong scripting skills in Python, TypeScript, and Bash. Experience with observability and monitoring platforms. Extensive experience working with Linux environments. Relevant AWS certifications highly regarded (e.g., DevOps Engineer, Solutions Architect). Nice to Haves Experience with Cloudflare. Experience with Kubernetes. Experience with spec-driven development. Experience working with autonomous sandboxed coding agents. An interest in platform engineering and developer experience. You Will Act as the 2IC to the DevSecOps Lead, with a view to growing into broader leadership responsibilities. Drive large initiatives to completion — owning outcomes, not just tasks. Collaborate with team members and product owners to solve operational issues and develop automation and enhancements. Control and manage end-to-end deployment processes, implementing and maintaining CI/CD practices alongside the development team. Work closely with our security function on implementation and remediation — tightening controls, implementing policies, and improving our security posture. Continuously improve the service and technology stack. Work closely with the DevSecOps Lead, VP of Engineering, and Head of Security. Participate in on-call rotation (approximately 1 in every 6 weeks, remunerated).