DevX Build Pipeline/ DevOps Engineer CGEMJP00349975

Role Title: DevX Build Pipeline/DevOps Engineer

Duration: contract to run until 30/11/2026

Location: Hybrid. Sheffield, 3 days onsite with additional need to travel to other offices within the UK

Rate: up to £538.20 p/d Umbrella inside IR35

Role purpose / summary

Own and evolve our Jenkins Shared Library powering multi-language builds (Java/Maven, Node/NPM, Python, Helm, Terraform, containers). Deliver fast, secure, provenance-rich pipelines (SLSA, SBOM, digests) and strengthen supplychain integrity across teams.

Core Responsibilities:

• Design and maintain Groovy pipeline steps (build, test, package, scan, deploy).
• Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ, SAST/Container).
• Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch).
• Ensure artifact integrity (correct SHA1/SHA256 mapping, reproducible inputs, evidence modeling).
• Refactor legacy scripts (remove global state, consolidate hashing, standardize templates).
• Document ci-config.yaml standards and usage patterns.
• Mentor engineers on secure pipeline development and supply-chain practices. Troubleshoot and prevent pipeline incidents.

Essential Skills:

• 7+ years engineering; 3+ in CI/CD platform or DevSecOps.
• Strong Jenkins + Groovy shared library expertise.
• Advanced Python automation (JSON/YAML processing, tooling scripts).
• Deep Maven/NPM/Python packaging knowledge; exposure to Helm/Terraform and container image metadata.
• Supply-chain security (SLSA, CycloneDX SBOM, digests).
• Experience with SonarQube, Sonatype IQ, container and SAST scanning.
• Proven performance tuning (caching, parallelization, dependency pruning). Compliance Awareness.

Nice-to-Have

• Artifact signing / attestations (cosign, OCI).
• Terraform module and Helm chart publishing patterns.
• GitOps or release automation experience.
• GCP/AWS cloud experience

Soft Skills:

• Precise communicator documentation discipline.
• Ownership mindset, able to operate with minimal supervision.

Deliverables (First 30 Days):

• Current state assessment: audit shared library structure with view to understand all building blocks and modules support requests: work on user's reported issues to get to know critical parts of the pipeline and various configuration options. Identify bugs, classify them and develop hot fixes. feature requests: deliver 2 x small features/improvements to pipeline code.

If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.