<div class="earcuposdescription"><div class="earcuposdescriptionnote"><div class="earcuposdescription"><div class="earcuposdescriptionnote"><p>We're building a secure, cloud-native platform that underpins how software is delivered across the organisation. Following a major digital transformation, our platform enables teams to ship high-quality software quickly, safely, and consistently—by default. As we continue to scale, security, reliability, and developer experience are treated as first-class concerns, designed in from the start. This role sits at the heart of that mission, shaping how security is applied at scale and how engineering teams confidently move from idea to production.</p></div></div><div class="earcuposdescription"><div class="earcuposdescriptionnote"><h4 data-start="112" data-end="124">&nbsp;</h4></div></div></div></div><div class="earcuposdescription"><div class="earcuposdescriptiontitle">About the role:</div><div class="earcuposdescriptionnote"><div class="earcuposdescription">&nbsp;</div><div class="earcuposdescription"><div class="earcuposdescriptionnote"><p data-start="126" data-end="463">As a&nbsp;<strong data-start="131" data-end="153">DevSecOps Engineer</strong>, you'll be a hands-on contributor to the design, build, and operation of our internal platform. This is a&nbsp;<strong data-start="260" data-end="285">delivery-focused role</strong>, working closely with SRE, Cloud, and Application Security teams to embed security controls, guardrails, and best practices directly into tooling, pipelines, and infrastructure.</p><p data-start="465" data-end="730">You'll help define how security is applied at scale in a pragmatic, developer-friendly way, influencing engineering culture through code, automation, and clear technical standards—raising the baseline for security and operational excellence across the organisation.</p><h4 data-start="737" data-end="755">The Tech Stack</h4><p data-start="757" data-end="817">You'll work with a modern, cloud-native platform, including:</p><ul data-start="819" data-end="1585"><li data-start="819" data-end="923"><p data-start="821" data-end="923"><strong data-start="821" data-end="844">Cloud &amp; Networking:</strong>&nbsp;AWS (multi-account, IAM, VPC, managed services), hybrid/on-prem connectivity</p></li><li data-start="924" data-end="989"><p data-start="926" data-end="989"><strong data-start="926" data-end="957">Containers &amp; Orchestration:</strong>&nbsp;Docker, Kubernetes (EKS, ECS)</p></li><li data-start="990" data-end="1058"><p data-start="992" data-end="1058"><strong data-start="992" data-end="1019">Infrastructure as Code:</strong>&nbsp;OpenTofu, Terragrunt, CloudFormation</p></li><li data-start="1059" data-end="1125"><p data-start="1061" data-end="1125"><strong data-start="1061" data-end="1071">CI/CD:</strong>&nbsp;GitLab CI, reusable components, self-hosted runners</p></li><li data-start="1126" data-end="1221"><p data-start="1128" data-end="1221"><strong data-start="1128" data-end="1152">Security &amp; Identity:</strong>&nbsp;Microsoft Entra, AWS IAM, OIDC, secrets management, policy-as-code</p></li><li data-start="1222" data-end="1312"><p data-start="1224" data-end="1312"><strong data-start="1224" data-end="1242">Observability:</strong>&nbsp;Centralised logging, metrics, tracing (e.g. Datadog, OpenTelemetry)</p></li><li data-start="1313" data-end="1397"><p data-start="1315" data-end="1397"><strong data-start="1315" data-end="1339">Platform Automation:</strong>&nbsp;Declarative configuration and infrastructure management</p></li><li data-start="1398" data-end="1513"><p data-start="1400" data-end="1513"><strong data-start="1400" data-end="1421">Internal Tooling:</strong>&nbsp;Developer-facing tools and services built with Python, Go, and modern frontend frameworks</p></li><li data-start="1514" data-end="1585"><p data-start="1516" data-end="1585"><strong data-start="1516" data-end="1536">Version Control:</strong>&nbsp;Git, merge requests, and code review workflows</p></li></ul><p data-start="1587" data-end="1689">We value strong fundamentals over specific tools—if you understand the principles, you'll thrive here.</p><h4 data-start="1696" data-end="1714">What You'll Do</h4><ul data-start="1716" data-end="2240"><li data-start="1716" data-end="1785"><p data-start="1718" data-end="1785">Design, build, and operate secure cloud and platform capabilities</p></li><li data-start="1786" data-end="1863"><p data-start="1788" data-end="1863">Embed security controls across the software delivery lifecycle by default</p></li><li data-start="1864" data-end="1949"><p data-start="1866" data-end="1949">Build and maintain fast, reliable, secure CI/CD pipelines and reusable components</p></li><li data-start="1950" data-end="2007"><p data-start="1952" data-end="2007">Automate security, compliance, and operational checks</p></li><li data-start="2008" data-end="2083"><p data-start="2010" data-end="2083">Partner with engineering teams to remove friction and improve workflows</p></li><li data-start="2084" data-end="2159"><p data-start="2086" data-end="2159">Contribute to platform architecture, standards, and technical direction</p></li><li data-start="2160" data-end="2240"><p data-start="2162" data-end="2240">Promote ownership, continuous improvement, and pragmatic DevSecOps practice</p></li></ul></div></div></div></div><div class="earcuposdescription"><div class="earcuposdescriptiontitle">Key requirements:</div><div class="earcuposdescriptionnote"><div class="earcuposdescription"><div class="earcuposdescriptionnote"><ul><li>Hands-on experience as a DevSecOps Engineer, Platform Engineer, Cloud Security Engineer, or similar role</li><li>Strong understanding of DevSecOps principles, including CI/CD, infrastructure as code, and security automation</li><li>Solid experience working in AWS environments</li><li>Practical knowledge of containerised workloads and Kubernetes</li><li>Clear communication skills and the ability to work effectively across teams</li><li>A focus on raising engineering standards through practical, scalable solutions</li></ul><h4>Why Holland &amp; Barrett?</h4><p>You will be joining at a point where the platform is still being actively shaped, with real scope to influence how security and delivery work across the organisation.<br><br>This role offers autonomy, technical ownership, and the opportunity to build foundational capabilities that directly impact hundreds of engineers. We offer a competitive salary, comprehensive benefits, and flexible working arrangements.</p><p data-start="2452" data-end="2549" data-is-last-node="" data-is-only-node="">If you enjoy building secure platforms that developers actually love, we'd love to hear from you.</p><p data-start="2452" data-end="2549" data-is-last-node="" data-is-only-node="">#LI-CF1</p></div></div><div class="earcuposdescription"><div class="earcuposdescriptiontitle">&nbsp;</div></div></div></div><div class="earcuposdescription"><div class="earcuposdescriptiontitle">What we offer:</div><div class="earcuposdescriptionnote"><p><strong>Wellbeing &amp; Lifestyle Benefits</strong>&nbsp;</p><ul><li>Health Cash Plan&nbsp;&nbsp;</li><li>Life Assurance</li><li>Incentive Scheme - Based on company &amp; personal performance</li><li>Virtual GP&nbsp;</li><li>Private Medical care</li><li>FREE at-home blood test kit&nbsp;</li><li>Holiday Purchase option&nbsp;</li><li>Pension Contribution scheme</li><li>Access to ‘Wellhub' with gyms, studios and wellbeing apps&nbsp;</li></ul><p><strong>Discounts &amp; Savings</strong>&nbsp;</p><ul><li>25% Colleague Discount with FREE Standard Delivery&nbsp;</li><li>Exclusive Discounts from a wide range of partners&nbsp;</li><li>£/€50 Annual Product Allowance to spend in store&nbsp;</li></ul><p><strong>Learning &amp; Development</strong>&nbsp;</p><ul><li>Access to a variety of learning opportunities, including Level 2-5 Apprenticeships, Workshops and our Digital Learning Library&nbsp;</li><li>AND MORE!&nbsp;</li></ul></div></div><div class="earcuposdescription"><div class="earcuposdescriptionnote"><p><span style="font-size: 11pt; font-family: 'open sans', sans-serif;"><em><span class="ui-provider a b c d e f g h i j k l m n o p q r s t u v w x y z ab ac ae af ag ah ai aj ak" dir="ltr"><span data-teams="true">Holland and Barrett is an equal opportunity employer. We welcome diverse perspectives and are committed to creating an inclusive environment for all colleagues. We understand that when our colleagues are listened to, respected and valued for who they are, we build an&nbsp;organisation&nbsp;with belonging at its heart – making health and wellness a way of life for everyone.</span></span></em></span></p><p><span style="font-family: 'open sans', sans-serif; font-size: 11pt;"><span class="ui-provider a b c d e f g h i j k l m n o p q r s t u v w x y z ab ac ae af ag ah ai aj ak" dir="ltr"><em>Holland &amp; Barrett </em><em>does not accept unsolicited resumes from search firms/recruiters. Please do not forward resumes to our job alias, employees, or any other company location. Holland &amp; Barrett is not and will not be responsible for any fees if a candidate submitted by a search firm/recruiter unless otherwise agreed with respect to specific open position(s).&nbsp;</em></span></span></p></div></div>