DevX Build Pipeline/DevOps Engineer
Contract DevOps engineer (through 30/11/2026, hybrid with 3 days onsite in Sheffield) who owns and evolves a Jenkins shared library powering multi-language builds, delivering secure, provenance-rich CI/CD pipelines with SLSA/SBOM supply-chain integrity using Groovy, Python, Maven/NPM, Helm, Terraform, and security scanning tools.
- Compensation
- £538 / day
- Location
- Sheffield, United Kingdom
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Contract
- Experience
- 7+ years
- Category
- Devops
- Posted
Skills
Must have
- 7+ years engineering; 3+ in CI/CD platform or DevSecOps
- Strong Jenkins + Groovy shared library expertise
- Advanced Python automation (JSON/YAML processing, tooling scripts)
- Deep Maven/NPM/Python packaging knowledge
- Exposure to Helm/Terraform and container image metadata
- Experience with SonarQube, Sonatype IQ, container and SAST scanning
- Proven performance tuning (caching, parallelization, dependency pruning)
- Compliance awareness
- Ownership mindset, able to operate with minimal supervision
Nice to have
- Terraform module and Helm chart publishing patterns
- GitOps or release automation experience
Full description
Duration: contract to run until 30/11/2026
Location: Hybrid. Sheffield, 3 days onsite with additional need to travel to other offices within the UK
Rate: up to £538.20 p/d Umbrellainside IR35
Own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supplychain integrity across teams.
Core Responsibilities
- Design and maintain Groovy pipeline steps (build, test, package, scan, deploy).
- Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container).
- Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch).
- Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling).
- Refactor legacy scripts (remove global state, consolidate hashing, standardize templates).
- Document ci-config.yaml standards and usage patterns.
- Mentor engineers on secure pipeline development and supply-chain practices. Troubleshoot and prevent pipeline incidents.
- 7+ years engineering; 3+ in CI/CD platform or DevSecOps.
- Strong Jenkins + Groovy shared library expertise.
- Advanced Python automation (JSON/YAML processing, tooling scripts).
- Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata.
- Experience with SonarQube, Sonatype IQ, container and SAST scanning.
- Proven performance tuning (caching, parallelization, dependency pruning). Compliance Awareness.
Nice-to-Have
- Terraform module and Helm chart publishing patterns.
- GitOps or release automation experience.
Soft Skills
- Ownership mindset, able to operate with minimal supervision.
- Current state assessment: audit shared library structure with view to understand all building blocks and modules support requests: work on user's reported issues to get to know critical parts of the pipeline and various configuration options. Identify bugs, classify them and develop hot fixes. feature requests: deliver 2 x small features/improvements to pipeline code.