DevSecOps Engineer

📋 Job Overview

At the heart of everything we do is our vision to change lives every day, and our mission to grow The National Lottery responsibly and champion its impact. We are Allwyn UK, part of the Allwyn Entertainment Group – a multi-national lottery operator with a market-leading presence across Europe which includes: Czech Republic, Austria, Greece, Cyprus & Italy, and the US. While the main contribution of The National Lottery to society is through the funds to good causes, at Allwyn we put our purpose and values at the heart of everything we do. Join us as we embark on a once-in-a-lifetime, largescale transformation journey by creating a National Lottery that delivers more money to good causes.

🏢 About Allwyn UK

At Allwyn, we are dedicated to changing lives and growing the National Lottery responsibly, championing its positive impact on people, places, and the planet. We pride ourselves on innovation, constantly looking for new ways to excite our customers. Our aim is to have doubled the £30m weekly charity contributions by the end of the first 10-year license. We are committed to sustainability, aiming to become a net zero national lottery with 2030 targets to decarbonise our operations. We believe in empowering every voice, creating a culture where everyone feels they belong and can thrive for the benefit of good causes.

🎯 The Role

As Allwyn transitions most of its technology services from on premise into a multi-cloud environment, Cloud Security becomes critically important to ensure our core services and gaming platforms are safe. The DevOps engineer is the dedicated DevOps specialist focused on prioritising and resolving security defects and vulnerabilities across cloud platforms and application pipelines. The role acts as the technical bridge between Cloud Engineering and the Security Operation Centre (SOC), Enterprise Security and Cyber Defence teams. The DevOps Engineer ensures that cloud infrastructure and delivery pipelines in AWS and Azure are Secure by Design, automating remediation where possible and embedding security controls into infrastructure as code (IaC) and CI/CD pipelines. You will champion secure engineering practices ensuring both speed of delivery and robust security posture across all environments.

✅ Key Responsibilities

• Monitor, triage and remediate vulnerabilities across applications, cloud workloads, containers, CI/CD pipelines and IaC repositories
• Work closely with SOC, Enterprise Security and Cyber Defence teams to respond to active and emerging threats ensuring rapid technical remediation
• Integrate security tooling into CI/CD pipelines including container scanning and secret scanning
• Maintain and improve IaC security posture using Terraform and ensure compliance with security baselines and guardrails
• Automate security checks and enforcement using policy as code, security scanners and cloud native services
• Support threat modelling and secure solution design with engineering teams
• Own vulnerability management workflows and ensure timely remediation in line with risk and audit expectations
• Implement and maintain cloud security configurations (IAM, key management, WAF security groups, logging and monitoring)
• Produce technical documentation, runbooks and remediation guidance for engineering teams
• Work with product and engineering teams to embed security into development standards
• Create and enforce governance policies

📌 Required Qualifications

• 3-5+ years hands-on experience in DevOps, platform engineering or DevSecOps role
• Strong development background with the ability to build automation and tooling for security remediation
• Strong infrastructure as code experience using Terraform across AWS and Azure
• Deep understanding of cloud security principles, identity and access controls, network security and container security in AWS and Azure
• Experience integrating and managing security controls
• Solid understanding of CI/CD pipelines including GitHub Actions
• Practical experience with vulnerability management, threat remediation and working with the Security Operating Centre and Cyber teams
• Strong understanding of modern application architectures
• Demonstrated ability to keep up with rapidly evolving cloud technologies

⭐ Desirable Experience

No specific desirable experience mentioned.

🎁 Benefits

Competitive salary and benefits package.

🛂 Visa & Eligibility

No specific visa or eligibility information provided.