Senior DevSecOps Engineer, Seccl
£65-100k
More information about location
The embedded investment platform
Open for applications
The embedded investment platform
101-200 employees
Open for applications
£65-100k
More information about location
101-200 employees
Company mission
Seccl is the Octopus-owned embedded investment platform that’s helping more people to invest – and invest well.
Role
Who you are
- Proficiency in Node.js, with proven experience building production services or CLIs with robust testing, error handling, and secure coding practices
- Strong experience with Infrastructure as Code (Terraform) and CI/CD (GitHub Actions) for automating cloud and identity configurations, including secure secrets management
- Solid understanding of core AWS services relevant to modern authentication patterns, such as API Gateway, Lambda authorisers, and CloudWatch
- A commitment to observability, with hands-on experience implementing structured logging, dashboards, and SLOs for critical services
- Excellent collaboration skills, demonstrated through participation in design reviews, pairing, and writing clear technical documentation (e.g., runbooks, ADRs)
- Experience with enterprise SSO (OIDC/SAML), SCIM provisioning, and proficiency in TypeScript are highly desirable
- If this sounds like your kind of thing, we encourage you to apply even if you don’t tick every box. We’d love to hear from you!
What the job involves
- We’re looking for a Senior DevSecOps Engineer to join our DevSecOps team, reporting to the Squad Engineering Manager (SEM) and working closely with product engineering squads and platform teams
- The role is Node.js-heavy and initially focused on authentication: completing our migration from a legacy auth system to Auth0, moving M2M clients to Private Key JWT (with client-credentials fallback where needed), and automating customer onboarding (keys/JWKs and SSO enablement)
- It’s a hands-on opportunity to ship high-impact security work that directly unblocks delivery
- The DevSecOps team partners across the business to make secure-by-default the easiest path - through guardrails, self-service tooling, and CI/CD enablement
- We’re a collaborative, remote-first group with clear objectives: land the Auth0 rollout, deprecate legacy auth safely, and introduce scope-based, fine-grained access controls across our API and UI
- You’ll help us deliver these programmes while strengthening our platform security posture and accelerating product teams
- Designing, building, and maintaining production-grade Node.js integrations, CLIs, and automation surrounding our Auth0 identity platform
- Leading firm-by-firm migrations to Auth0, implementing robust cutover strategies using feature flags, canaries, and detailed rollback plans
- Architecting and automateing customer onboarding processes, including keypair/CSR handling, JWK publishing, and SSO connection setup
- Utilising Infrastructure as Code (Terraform) and CI/CD (GitHub Actions) to manage Auth0 configuration and ensure safe, repeatable deployments
- Implementing comprehensive observability for authentication paths with structured logs, monitoring dashboards, alerts, and SLOs
- Collaborating closely with product, engineering, and support teams on migration timelines, communications, and incident response
Application process
- ⏳ We’ll only close this role once we have enough applications for the next stage
- Please submit your application as soon as possible to make sure you don’t miss out and you should expect to hear back from us within one to two weeks of applying
- Interviewing is a two-way thing, and we want you to have the time and opportunity to get to know us, as much as we are getting to know you
- Our interviews are conversational, so come with questions and be curious
- In general, you can expect the interview process to look a bit like this, (following an initial chat with one of our Talent team):
- Stage 1: Take-Home technical task
- We'll send you a brief technical challenge that reflects the type of work we do. To submit your work, we’ll invite you to a private GitHub repository where you can create a pull request with your changes
- We respect your time, so we’ve designed the task to be completed within a 60-90 minute time-box, and you'll have a few days to complete it at your convenience
- Please don’t worry about creating a perfect, production-ready solution. We use this task as a practical starting point for our technical conversation in the next stage and are most interested in your approach and thought process
- Stage 2: Technical Discussion & Task Review (60 minutes)
- Stage 3: Bar-raiser culture-based interview (45 minutes)
Our take
Seccl is an embedded investment platform revolutionising how companies offer investment services. With its API-first technology infrastructure it helps financial professionals and businesses launch and manage investment platforms easily. By simplifying old, clunky processes, Seccl gives firms the tools they need to offer customers a seamless, digital investing experience - whether it's for financial advisers, neobanks, or fast-growing startups.
Since being acquired by Octopus in 2019, Seccl has seen impressive growth. Now supporting over 190,000 investors as well as managing more than £13.4B in funds through its platform. With this, Seccl is well on track to power even more businesses and as it continues to grow, its mission to disrupt the industry with smarter, scalable solutions is only growing in momentum.
Steph
Company Specialist at Welcome to the Jungle
Company
Company benefits
- Flexible/hybrid working: We don’t prescribe when or how many days you come into the office. It’s what you deliver that’s important
- Events and socials: Twice-yearly all-company offsites, regular team socials and plenty of non-work activities – from gigs to sporting activities – to get stuck into
- Private medical: Access GP and other health and dental appointments work through private medical insurance
- Focus on mental health: Your wellbeing is more important than work. We offer free and confidential access to therapy if you need it
- Long-service award: A month’s fully-paid sabbatical when you’ve worked here for eight years (we’re part of Octopus, after all)
- The usual stuff: 27 days’ holiday (plus religious holidays and your birthday), Cycle2Work scheme and workplace pension
Company values
- Never settle
- Take ownership
- Be generous and candid
Company HQ
Holborn, London, UK
Articles
Leadership
David Ferguson
(CEO)Joined Seccl in 2022 as CEO. Prior to that, they spent 15 years as the CEO of Nucleus Financial Group.
Share this job
View 12 more jobs at Seccl