Senior DevSecOps Engineer

OverviewThe Ellison Institute of Technology (EIT) tackles humanity's greatest challenges by turning science and technology into impactful global solutions. EIT focuses on areas such as health, food security, sustainable agriculture, climate change, clean energy, and robotics in an era of artificial intelligence. It blends groundbreaking research with practical applications to deliver lasting results. A cornerstone of EIT's mission is its upcoming 300,000-square-foot research facility at the Oxford Science Park, opening in 2027, featuring advanced labs, an oncology and preventative care clinic, and collaborative spaces to strengthen its partnership with the University of Oxford. It will also host the Ellison Scholars, driving innovation for societal benefit. The Pathogen Mission highlights EIT's approach, using Whole Genome Sequencing (WGS) and Oracle's cloud technology to create a global pathogen metagenomics system aimed at improving diagnostics, providing early epidemic warnings, and guiding treatments by profiling antimicrobial resistance, with the goal of delivering certified diagnostic tools for use in labs, hospitals, and public health. EIT fosters a culture of collaboration, innovation, and resilience, valuing diverse expertise to drive sustainable solutions to humanity's enduring challenges.Find out exactly what skills, experience, and qualifications you will need to succeed in this role before applying below.We are looking for a Senior DevSecOps Engineer to join the Pathogen Programme at EIT. In this role, you will help ensure our data platform is built to the highest standards, with a strong emphasis on automation across the development lifecycle. You will work closely with engineers to deploy data pipelines and platform features, and support bioinformaticians in building and deploying their workflows. You will be responsible for maintaining infrastructure, designing secure automation pipelines, managing cloud environments, and ensuring security and compliance. You will collaborate with cross-functional teams, data engineers, backend, and full-stack developers to build robust, automated deployment pipelines across our environments.ResponsibilitiesDesign, implement, and maintain secure cloud infrastructure using Oracle Cloud Infrastructure (OCI)Develop and manage Infrastructure as Code (IaC) with tools like Terraform to enable secure, repeatable deploymentsImplement and manage CI/CD pipelines, focusing on automated security testing, deployment, and monitoringEnsure all aspects of the data platform OCI infrastructure, data ingest pipelines, tool deployments, access controls, and monitoring are developed, tested, and deployed using automation best practicesSupport bioinformaticians in building pipelines that are secure by design, version-controlled, and deployed through automated workflowsCollaborate with engineering teams to embed security throughout the development lifecycleAutomate vulnerability assessments to proactively identify and mitigate risksWork closely with the security team to integrate best practices into new and existing featuresEnsure compliance with security standards and regulations (e.g., ISO 27001, SOC 2)Implement monitoring solutions to detect and respond to real-time security incidentsTroubleshoot infrastructure and security issues, performing root cause analysis in productionMentor junior engineers in security best practices and DevOps approachesCollaborate with technical leads to enhance internal workflows and security processesRequirementsEssential Knowledge, Skills and ExperienceHands-on experience with cloud infrastructure, ideally Oracle Cloud (OCI), including provisioning, configuration, and service managementProficient with Terraform or similar IaC toolsSkilled in implementing and maintaining CI/CD pipelines (e.g., GitHub Actions), especially with automated security testingStrong knowledge of containerisation (e.g., Docker) and orchestration (e.g., Kubernetes)Deep understanding of cloud security principles: IAM, network security, encryptionExperience with monitoring/alerting tools (e.g., Prometheus, Grafana, ELK stack)Proficient in Git or other version control systemsDesirable Knowledge, Skills and ExperienceCertifications in OCI or other cloud platforms (AWS, GCP)Experience with security tools like OWASP ZAP, Burp Suite, etcFamiliarity with Jira, Confluence, or similar toolsKnowledge of compliance frameworks (e.g., GDPR, HIPAA, ISO 27001, ISO 13485)Background in start-up or scale-up environments is a plusKey AttributesStrong collaboration skillsEagerness to learn and upskill in new technologiesProactive and hands-on with exploring new tools and developing POCsExcellent problem-solving and critical thinking, especially around securityEffective communicator and team player across functionsAble to manage multiple tasks and deadlines in a dynamic environmentDetail-oriented with a strong commitment to security and qualityAdaptable and ready to contribute in a fast-scaling organisationBenefitsSalary: Competitive salary on offerEnhanced holiday payPensionLife AssuranceIncome ProtectionPrivate Medical InsuranceHospital Cash PlanTherapy ServicesPerk BoxElectrical Car SchemeWhy work for EITAt the Ellison Institute, we believe a collaborative, inclusive team is key to our success. We are building a supportive environment where creative risks are encouraged, and everyone feels heard. We value emotional intelligence, empathy, respect, and resilience, and we encourage people to be curious with a shared commitment to excellence. Join us and make an impact xpwpeyx Terms of AppointmentYou must have the right to work permanently in the UK with a willingness to travel as necessaryYou will live in, or within easy commuting distance of, OxfordDuring peak periods, some longer hours may be required and some working across multiple time zones due to the global nature of the programmeSeniority levelMid-Senior levelEmployment typeFull-timeJob functionInformation TechnologyIndustriesIT Services and IT ConsultingNote: This description excludes irrelevant boilerplate and does not include external tracking links or generic postings.#J-18808-Ljbffr