Principal DevOps Engineer

Principal DevOps Engineer – £125,000 | Remote (UK & Ireland)

Full-Time | Permanent | Fully Remote

Are you a seasoned DevOps engineering leader ready to own and shape a world-class platform from the ground up? We’re hiring a Principal DevOps Engineer to drive our next-generation CI/CD, infrastructure automation, and developer experience strategy across cloud and on-prem environments.

This is a hands-on, high-impact role where you will architect, deliver, and own core platform capabilities used by engineering teams across the organisation. If you thrive on autonomy, deep technical problem-solving, and delivering meaningful end-to-end systems—this is the opportunity for you.

What You’ll Do

Platform Ownership & Architecture

• Own the end-to-end engineering delivery platform from commit to production across cloud and on-prem environments.
• Define CI/CD, artifact management, secrets, and IaC architecture and deliver it through a clear, actionable roadmap.

CI/CD & GitHub Actions Leadership

• Architect reusable workflow libraries and organisation-wide GitHub Actions standards.
• Implement composite actions, OIDC auth, environment protection, matrix builds, and automated quality gates.

Infrastructure as Code (Terraform & Ansible)

• Lead Terraform module frameworks, state management, provider internals, and policy-as-code (OPA/Sentinel).
• Own Ansible roles, collections, dynamic inventory, and idempotent configuration automation across environments.

Secrets, Image Standards & Supply Chain Security

• Implement and manage HashiCorp Vault at scale (auth methods, dynamic secrets, audit devices).
• Own container image build standards, multi-stage optimisation, signing, scanning, and Compose-based workflows.

Artifact Management & Build Systems

• Manage multi-format artifact repositories and automated promotion pipelines across NuGet, Maven/Gradle, NPM, PyPI, Gems & container registries.
• Optimise .NET CLI/MSBuild, Maven, and Gradle builds; ensure reliable packaging and publishing.

Cloud, On-Prem & Network Delivery

• Deliver infrastructure and pipelines to AWS/Azure/GCP + on-prem Linux environments from a unified IaC strategy.
• Manage Cloudflare DNS, WAF, Zero Trust, and provider-driven automation.

Observability, Security & Monitoring

• Embed SAST, dependency scanning, image scanning, SBOM, and supply chain hygiene into the pipeline.
• Build Splunk dashboards/alerts for platform health, delivery metrics, and SLOs.

What You Bring

• Bachelor’s Degree in Computer Science or equivalent professional experience
• 8–10+ years in DevOps, platform engineering, or software engineering with hands-on coding experience (ideally C# or Java)
• Proven track record of delivering complex platform initiatives end-to-end
• Ability to write production-quality code in at least one statically typed language
• Expert with:
• GitHub & GitHub Actions
• Terraform (modules, state, provider internals, policy-as-code)
• Ansible (roles, collections, dynamic inventory, idempotency)
• HashiCorp Vault (auth methods, KV/dynamic engines, audit devices)
• OCI image build optimisation (multi-stage, caching, scanning, signing)
• Artifact repository management across multiple ecosystems
• Strong experience across:
• Cloudflare DNS/WAF/Zero Trust
• .NET CLI/MSBuild, Maven, Gradle
• Bash scripting & automation
• Cloud environments: AWS, Azure, GCP
• On-prem Linux & Windows + VMware/Hyper-V
• Familiar with Splunk dashboards, delivery metrics, SLOs
• Security-first engineering mindset

Who You Are

• A hands-on engineer who can design, build, and deliver complex systems
• A strong communicator able to articulate technical decisions clearly
• A mentor who elevates engineering standards across teams
• Someone who thrives in an autonomous, high-impact role
• A problem-solver who prioritises outcomes over outputs

Apply Today

If you're ready to lead platform engineering at scale, drive modern DevOps maturity, and deliver automation that makes a real organisational impact, I'd love to hear from you.

Apply now or message directly for a confidential discussion.