- Company Name
- Gazelle Global
- Job Title
- DevOps Engineer
- Job Description
-
**Job Title**
DevOps Engineer
**Role Summary**
Lead the development, maintenance, and evolution of a Jenkins Shared Library that supports multi‑language build pipelines (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance‑rich CI/CD workflows, enforce supply‑chain integrity, optimize performance, document best practices, and mentor peers.
**Expectations**
- Own end‑to‑end pipeline lifecycle across core languages and artifact types.
- Apply DevSecOps principles to build secure, reproducible, and auditable software artifacts.
- Drive engineering excellence through performance tuning, modular design, and clear documentation.
- Collaborate closely with development, security, and operations teams to adopt supply‑chain best practices.
- Provide hands‑on mentorship and knowledge transfer on secure pipeline development.
**Key Responsibilities**
- Design, implement, and maintain Groovy pipeline steps for build, test, package, scan, and deploy.
- Extend Python tooling for SLSA provenance, CycloneDX SBOM generation, hash/digest calculation, and aggregating security scans (SonarQube, Sonatype IQ, SAST, container).
- Optimize pipeline performance via parallelism, caching, dependency prefetching, and BOM scope reduction.
- Ensure artifact integrity: correct SHA1/SHA256 mapping, reproducible inputs, and evidence modelling.
- Refactor legacy scripts: eliminate global state, consolidate hashing logic, standardize templates.
- Document `ci-config.yaml` standards and usage patterns for the engineering community.
- Mentor engineers on secure pipeline development and supply‑chain practices.
- Troubleshoot, investigate, and prevent pipeline incidents and regressions.
**Required Skills**
- 7+ years software engineering experience, with 3+ years focused on CI/CD or DevSecOps.
- Deep expertise with Jenkins and Groovy shared library development.
- Advanced Python scripting for JSON/YAML manipulation and automation tooling.
- Strong knowledge of Maven, NPM, Python packaging, Helm, Terraform, and container image metadata.
- Proficiency in supply‑chain security concepts: SLSA, CycloneDX SBOM, digests, and attestations.
- Hands‑on experience with SonarQube, Sonatype IQ, container and static application security testing.
- Proven performance tuning: caching strategies, parallel builds, dependency pruning, and scope optimization.
- Awareness of compliance frameworks (e.g., OWASP, ISO 27001).
**Desirable Skills**
- Artifact signing and attestations using cosign or OCI tools.
- Helm chart and Terraform module publishing patterns.
- GitOps or release automation experience.
- Familiarity with GCP or AWS cloud services.
**Required Education & Certifications**
- Bachelor’s degree in Computer Science, Software Engineering, or a related technical field (or equivalent experience).
- Relevant certifications (e.g., Jenkins, AWS, Google Cloud, or security-focused credentials) are a plus.
Sheffield, United kingdom
Hybrid
Senior
20-01-2026