Lead DevSecOps Engineer – AECOM | jobs in UK

Lead DevSecOps Engineer – AECOM

About AECOM

AECOM is a global infrastructure consulting firm providing professional services across engineering, technology, design, environment, transportation, buildings, and infrastructure. Its teams work with clients to deliver complex projects and develop innovative solutions that support communities and the built environment.

AECOM’s AI Engineering team combines advanced technology with the scale and expertise of a global engineering organisation. The team develops AI-driven products and platforms designed to improve how infrastructure and buildings are designed and engineered, with a focus on reliability, scalability, security, and sustainable outcomes.

Role Overview

As a Lead DevSecOps Engineer with AECOM, the successful candidate will lead DevSecOps capabilities that enable engineering teams to build, release, and operate services across a multi-cloud environment.

The role will focus on CI/CD, Infrastructure as Code, observability, production reliability, cloud governance, and secure engineering across Microsoft Azure and Google Cloud Platform (GCP). The successful candidate will also manage relationships with major cloud and technology vendors, supporting service reviews, security advisories, escalations, roadmaps, and cost discussions.

This position is suited to an experienced DevOps, SRE, platform engineering, or DevSecOps professional who can guide technical decisions, mentor colleagues, and work closely with platform, product, and AI/ML engineering teams.

Key Responsibilities as Lead DevSecOps Engineer

• Lead DevSecOps capabilities across AECOM’s multi-cloud engineering platform
• Develop and improve CI/CD pipelines and reusable workflows for reliable testing and deployment
• Introduce automated quality and security controls throughout development and release processes
• Build strong observability through monitoring, logging, tracing, runbooks, and incident-response processes
• Define and track service reliability objectives and recovery requirements for production services
• Lead incident reviews and use findings to support continuous reliability improvements
• Develop and maintain Infrastructure as Code and cloud automation solutions
• Embed security into engineering workflows and cloud environments
• Conduct platform security reviews and threat modelling
• Manage identity, access, secrets, software supply-chain security, and vulnerability remediation
• Monitor security posture across Azure and GCP environments
• Identify and prioritise cloud misconfigurations, vulnerabilities, and remediation activities based on risk
• Manage technical relationships with Microsoft, Google Cloud, and other important technology vendors
• Lead vendor service reviews, security advisory responses, escalations, roadmap discussions, and cost conversations
• Work with platform, product, and AI/ML engineers on architecture and technology decisions
• Mentor colleagues and help teams balance developer experience, reliability, performance, security, and cost
• Support production workloads through capacity planning and disaster-recovery testing

Preferred Skills

• Experience developing internal developer platforms or self-service cloud capabilities
• Knowledge of image scanning, artefact signing, or software provenance controls for containerised workloads
• Familiarity with cloud security posture management and policy-as-code
• Knowledge of security monitoring and compliance automation
• Experience supporting AI/ML workloads and SaaS platforms in production

Working Pattern & Location

• Job Title: Lead DevSecOps Engineer
• Company: AECOM Engineering Technology Services Ltd
• Location: London, UK
• Primary Location: UK – London, Holbein Gardens
• Employment Type: Full-time
• Working Model: On-site
• Business Group: Corporate
• Business Line: Corporate
• Career Area: Information Technology
• Team: AI Engineering

Recruitment Process

AECOM’s listed recruitment process includes:

• 25-minute screening call
• Take-home technical challenge
• Combined technical and cultural interview
• One-hour technical interview with two engineers
• 30-minute meeting with the leadership team

Start Your Career With AECOM

AECOM provides opportunities for technology professionals to work on complex engineering and infrastructure challenges while developing their technical and leadership capabilities. The Lead DevSecOps Engineer will contribute to secure, reliable, and scalable platforms supporting AI-driven products and services.

The successful candidate will collaborate with engineers across platform, product, and AI/ML teams while helping strengthen cloud security, automation, reliability, and operational performance.

Apply now for the Lead DevSecOps Engineer position with AECOM in London and contribute to the development of secure and reliable multi-cloud technology platforms.