DevOps Engineer

Siliconlogic; Sheffield; On-site; GBP 60,000 - 80,000; Full time

Job summary

A technology company in the United Kingdom seeks an experienced CI/CD Engineer to design and maintain Jenkins pipelines, extend Python tooling, and optimize performance for various projects. This role requires over 7 years of engineering experience and a strong expertise in Jenkins and Groovy. The ideal candidate will also mentor others in secure pipeline development and contribute to enhancing supply chain integrity through advanced automation. A collaborative environment awaits those who thrive on challenges.

Qualifications

• 7+ years of engineering; 3+ years in CI/CD platform or DevSecOps.
• Strong expertise in Jenkins and Groovy shared library.
• Advanced Python automation skills.

Responsibilities

• Design and maintain Groovy pipeline steps.
• Extend Python tooling for SLSA provenance and SBOM generation.
• Optimize performance for builds and dependency management.

Skills

Jenkins

Groovy

Python

Maven

NPM

Terraform

GitOps

SonarQube

Container scanning

Job description

Own and evolve our Jenkins Shared Library powering multi‑language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance‑rich pipelines (SLSA, SBOM, digests) and strengthen supply‑chain integrity across teams.

Your Profile

Essential skills/knowledge/experience

• 7+ years of engineering; 3+ years in CI/CD platform or DevSecOps.
• Strong Jenkins + Groovy shared library expertise.
• Advanced Python automation (JSON/YAML processing, tooling scripts).
• Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata.
• Experience with SonarQube, Sonatype IQ, container and SAST scanning.
• Proven performance tuning (caching, parallelization, dependency pruning).
• Compliance Awareness.
• Terraform module and Helm chart publishing patterns.
• GitOps or release automation experience.

Responsibilities

• Design and maintain Groovy pipeline steps (build, test, package, scan, deploy).
• Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ).
• SAST/Container scanning.
• Optimize performance (parallel builds, caching, scope‑reduced BOMs, dependency prefetch).
• Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling).
• Refactor legacy scripts (remove global state, consolidate hashing, standardise templates).
• Document ci‑config.yaml standards and usage patterns.
• Mentor engineers on secure pipeline development and supply‑chain practices.
• Troubleshoot and prevent pipeline incidents.