Since our establishment in 1990, Methods has partnered with a range of central government departments and agencies to transform the way the public sector operates in the UK.
Our mission is to improve and safeguard public-facing services. We apply digital thinking to ensure the future of our public services is centered around our citizens.
Our human touch sets us apart from other consultancies, system integrators and software houses - we have a customer-centric value system whereby we focus on delivering what is right for our clients.
We passionately support our clients in the success of their projects while working collaboratively to share skill sets and solve problems. At Methods we have fun while working hard; we are not afraid of making mistakes and learning from them.
Methods are experts in delivering secure, resilient cyber and information services – keeping systems and data safe. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks.
We are looking for a Senior DevSecOps Engineer to build, automate and operate secure, resilient cloud and platform services. You will combine hands-on engineering with a security-first approach, helping teams deliver software reliably from development through to production.
The role focuses on Infrastructure as Code, CI/CD, container platforms and operational resilience, with particular emphasis on Azure, Terraform and Kubernetes. You will work closely with developers, architects, security specialists and delivery colleagues to turn requirements into practical, supportable solutions.
Requirements
- Build and maintain cloud and platform infrastructure using Terraform and other automation tools, creating reusable, version-controlled components.
- Develop and improve CI/CD pipelines for infrastructure and applications, supporting consistent deployment across development, test and production environments.
- Embed security into engineering workflows through automated scanning, secrets management, access controls and secure configuration.
- Deploy and support containerised applications and Kubernetes services, including configuration, networking and deployment troubleshooting.
- Implement and test resilience, backup and recovery arrangements in line with agreed service requirements.
- Improve logging, monitoring and alerting; investigate incidents and deployment failures; and address underlying causes.
- Contribute to threat modelling, security reviews and remediation of findings, working with security and assurance specialists.
- Translate requirements into manageable engineering tasks, identify dependencies and risks, and communicate progress clearly.
- Work with developers, operations colleagues and third-party suppliers to resolve integration issues and improve service supportability.
- Maintain clear technical documentation, runbooks and handover materials, and share knowledge through mentoring and peer review.
Essential skills and experience
- Demonstrable hands-on experience in DevOps, DevSecOps, platform engineering or a closely related role, including responsibility for production services.
- Practical experience building and supporting Microsoft Azure infrastructure and services.
- Strong Terraform skills, including reusable modules and controlled infrastructure deployment.
- Experience building and maintaining CI/CD pipelines using tools such as Azure DevOps, GitHub, GitLab or Jenkins; expertise in every listed tool is not required.
- Working experience with Kubernetes, containerisation and Linux administration, including troubleshooting application and platform issues.
- Ability to automate operational and deployment tasks using scripting languages such as Python or PowerShell, and configuration tools such as Ansible.
- Practical understanding of identity and access management, secrets management, private networking and secure deployment practices.
- Experience with monitoring, logging, incident investigation and recovery, with an emphasis on reliable, supportable services.
- Ability to work independently within an agreed technical direction, explain trade-offs, collaborate across disciplines and support less experienced engineers.
Desirable experience
- Delivery in government, defence or other security-sensitive or regulated environments.
- High-side, air-gapped or disconnected infrastructure, including hybrid cloud and on-premises platforms.
- Azure Kubernetes Service, Helm, Rancher or multi-site high-availability platforms.
- Security scanning and software supply-chain controls using tools such as Trivy, Grype or Black Duck; policy as code; or threat modelling.
- Familiarity with relevant security standards and frameworks, such as NCSC Secure by Design, ISO 27001, OWASP or SLSA.
- Site reliability engineering practices, disaster recovery testing or supplier-to-operations handover.
Candidates are not expected to have used every technology listed. Strong core engineering skills, sound security judgement and the ability to learn unfamiliar tools are more important than matching the full technology list.
This role will require you to have or be willing to go through Security Clearance. As part of the onboarding process candidates will be asked to complete a Baseline Personnel Security Standard; details of the evidence required to apply may be found on the government website Gov.UK. If you are unable to meet this and any associated criteria, then your employment may be delayed, or rejected . Details of this will be discussed with you at interview
Benefits
Methods is passionate about its people; we want our colleagues to develop the things they are good at and enjoy.
By joining us you can expect
- Autonomy to develop and grow your skills and experience
- Be part of exciting project work that is making a difference in society
- Strong, inspiring and thought-provoking leadership
- A supportive and collaborative environment
Development – access to LinkedIn Learning, a management development programme, and training
Wellness – 24/7 confidential employee assistance programme
Social – office parties, breakfast Tuesdays, monthly pizza Thursdays, Thirsty Thursdays, and commitment to charitable causes
Time Off – 25 days of annual leave a year, plus bank holidays, with the option to buy 10 extra days each year
Volunteering – 2 paid days per year to volunteer in our local communities or within a charity organisation
Pension – Salary Exchange Scheme with 4% employer contribution and 5% employee contribution
Life Assurance – of 4 times base salary
Private Medical Insurance – which is non-contributory (spouse and dependants included)
Worldwide Travel Insurance – which is non-contributory (spouse and dependants included)
Enhanced Maternity and Paternity Pay
Travel – season ticket loan, cycle to work scheme
For a full list of benefits please visit our website (www.methods.co.uk/careers/benefits)
Skills Required
- Hands-on experience in DevOps, DevSecOps, platform engineering, or a closely related role with responsibility for production services
- Practical experience building and supporting Microsoft Azure infrastructure and services
- Strong Terraform skills, including reusable modules and controlled infrastructure deployment
- Experience building and maintaining CI/CD pipelines with tools such as Azure DevOps, GitHub, GitLab, or Jenkins
- Working experience with Kubernetes, containerization, and Linux administration
- Ability to automate operational and deployment tasks using Python, PowerShell, Ansible, or similar tools
- Understanding of identity and access management, secrets management, private networking, and secure deployment practices
- Experience with monitoring, logging, incident investigation, and recovery
- Ability to work independently, explain trade-offs, collaborate across disciplines, and support less experienced engineers
- Experience delivering in government, defense, security-sensitive, or regulated environments
- Experience with high-side, air-gapped, disconnected, hybrid-cloud, or on-premises infrastructure
- Experience with Azure Kubernetes Service, Helm, Rancher, or multi-site high-availability platforms
- Experience with security scanning, software supply-chain controls, policy as code, or threat modeling
- Familiarity with NCSC Secure by Design, ISO 27001, OWASP, or SLSA
- Experience with site reliability engineering, disaster recovery testing, or supplier-to-operations handover
- Ability to obtain or willingness to undergo security clearance and Baseline Personnel Security Standard checks
What We Do
Methods is the leading digital transformation partner for the UK public sector. We care deeply about making our public services better and have been doing this for 28 years. Methods partners with a range of central government departments and agencies to transform the way public sector operates in the UK. Our mission is to help safeguard public-facing services and apply digital thinking to make sure the future of our public services is centred around citizens. Committed to having social impact, we enjoy an enviable track record of delivering real savings and benefits. We do this by helping you move from vertically integrated legacy infrastructure to a platform business model – allowing you to keep infrastructure costs low and focus on doing what you do best i.e. delivering front-end services. With Methods, you access a range of specialist skills and industry expertise to transform your organisation for the digital age, break free of expensive suppliers, and take control of your customer relationships and operating model. Further information on Methods Group can be found at www.methods.co.uk.
