Lead DevSecOps Engineer, Arondite

• 3+ years of experience building or scaling internal developer platforms or sophisticated CI/CD ecosystems
• Deep understanding of cloud-native primitives (Compute, Networking, Storage) and the ability to implement them across different providers or hybrid environments
• Proven ability to manage container orchestration at scale with Kubernetes, focusing on abstracting complexity for end-users rather than just "managing clusters."
• Expert-level proficiency in declarative configuration management and modular Infrastructure as Code design (e.g., Terraform, OpenTofu, or Pulumi)
• Strong competency in scripting or systems programming (Python, Go, or Bash) to glue disparate systems into a unified platform
• Evidence of delivering security compliance (e.g. UK government ‘Secure by Design’) as a key component of development tooling
• We believe in working closely with defence customers. As a result, this role will require the individual to hold a clearance or be willing to undergo UK security vetting to Security Check (SC) or above. This normally requires having continuous residency in the UK for at least 5 years

Desirable

• As Lead DevSecOps Engineer at Arondite you will be driving platform engineering and developer experience
• You will take full ownership of our internal development ecosystem, evolving it into a secure, robust, self-service platform that abstracts infrastructure complexity
• You will design and maintain the "Golden Path": the standardized, automated route from local code to a production-ready state
• You will need to be versatile and view infrastructure as a product, with our internal developers as your primary customers
• Being a lead at an early stage company will mean building a team to continue delivering and improving the capabilities as we scale
• You will need to engage with stakeholders to build a DevSecOps roadmap, and you will set the technical direction in order to deliver the required outcomes
• You will also support and mentor less experienced engineers by reviewing their outputs and giving them feedback
• Taking end-to-end ownership of the internal developer platform, identifying bottlenecks in the secure software development lifecycle and building automated solutions to resolve them
• Architecting and evolving standardized deployment patterns that bake in security, compliance, and observability, allowing product teams to focus on delivering customer functionality
• Ensuring high availability, performance, and seamless integration of our self-hosted engineering suite (GitLab) with the wider ecosystem
• Managing infrastructure-as-code practices and tooling to deliver version-controlled, auditable, and reproducible infrastructure
• Driving the adoption of modern deployment methodologies (such as GitOps) to ensure declarative, reproducible, and audited state management across all environments
• Owning automated security tooling (e.g. SAST, DAST, dependency scanning, container scanning, and secrets detection) to deliver security audit evidence for the platform

• CV submission with initial questions
• Introductory Teams call (30-45 mins)
• In-person technical interview (1-2 hours)
• Final interview with one of Arondite’s Founders (30 mins)