DevSecOps Engineer

Responsibilities

• Zero Trust implementation: Apply ZTA principles across defence cloud and hybrid infrastructure, covering identities, devices, networks and data.
• Enforce IAM, MFA, RBAC, ABAC and PAM controls.
• Explain complex security issues clearly to project managers.

Preferred

• VLANs, VPNs, proxies, firewalls, OAuth 2.0, OpenID Connect, SAML and LDAP.

Job Description

DXC Technology is committed to building diverse, inclusive teams. We welcome applications from all backgrounds and particularly encourage interest from women, underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone.

DevSecOps Engineer Location

Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role, and have the right to work in the United Kingdom. Some roles may also be subject to nationality requirements where these are necessary to meet UK Government or contractual security obligations.

Pipeline security

Embed automated compliance checks, container scanning and vulnerability assessments in CI/CD pipelines.

Infrastructure as Code

Manage secure, immutable infrastructure and network policies through controlled, repeatable code.

Monitoring and enforcement

Use telemetry and automated controls to detect, contain and respond to anomalies.

Core Technical Skills

Zero Trust: NCSC and NIST frameworks, micro-segmentation, software-defined perimeters and context-aware access.

Cloud and infrastructure security

Azure, AWS, and on-premises virtualised infrastructure.

Infrastructure as Code

Terraform, Ansible and CloudFormation.

Container security

Docker, Kubernetes, Istio, Prisma Cloud and Trivy.

What You'll Bring

Technical leadership: Lead Zero Trust adoption across multi-supplier teams.

Problem-solving

Diagnose network, identity federation and security integration issues.

Risk and governance

Balance delivery pace with defence security requirements.

Discretion

Handle sensitive defence information with judgement and integrity. At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive. Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here .