DevX Build_Pipeline Engineer

DevX Build Pipeline Engineer

+11 month +

+Hybrid working with Birmingham / Sheffield / Edinburgh

+Inside IR35

+£525 - £548 a day

Skills:

+CI / CD pipeline

+Python

+Jenkins

We are seeking an experienced DevX Build Pipeline Engineer to own and evolve a critical Jenkins Shared Library that powers multi-language build pipelines across the organisation. You will play a key role in delivering fast, secure, and provenance-rich CI/CD pipelines, strengthening software supply-chain integrity and enabling engineering teams to ship with confidence.

This role sits at the intersection of Dev Ops, Dev Sec Ops , and Developer Experience
, with a strong emphasis on Python automation, Jenkins/Groovy pipelines, and modern supply-chain security standards.

• Design, build, and maintain Jenkins Shared Library pipeline steps (build, test, package, scan, deploy).

• Develop and extend Python tooling for:

  • SLSA provenance

  • SBOM generation (Cyclone
    
    DX)

  • Hash/digest accuracy (SHA1/SHA
    256)

  • Security scan aggregation (Sonar Qube, Sonatype IQ, SAST, container scanning)

• Optimise pipeline performance through parallelisation, caching, dependency prefetching, and BOM scope reduction.

• Ensure artifact integrity and reproducibility
  , including evidence modelling and digest validation.

• Refactor and modernise legacy pipeline scripts (remove global state, standardise templates, consolidate hashing logic).

• Define and document ci-config.yaml standards and usage patterns.

• Mentor engineers on secure pipeline development and software supply-chain best practices.

• Proactively troubleshoot and prevent CI/CD pipeline incidents.

• 7+ years' engineering experience, with 3+ years in CI/CD platform or Dev Sec Ops  roles
  .

• Expert knowledge of Jenkins and Groovy Shared Libraries
  .

• Strong Python automation skills (JSON/YAML processing, tooling scripts).

• Deep understanding of Maven, NPM, and Python packaging
  .

• Exposure to Helm, Terraform, and container image metadata
  .

• Solid experience with software supply-chain security (SLSA, Cyclone
  
  DX SBOMs, digests).

• Hands-on use of Sonar Qube, Sonatype IQ, SAST, and container scanning tools
  .

• Proven ability to optimise CI/CD performance (caching, parallel builds, dependency pruning).

• Awareness of compliance and secure-by-design engineering practices.

If you'd like to discuss this DevX Build Pipeline Engineer role in more detail, please send your updated CV to c and I will get in touch.