Lead DevSecOps Engineer

About the company

John Crane is a worldwide provider of mission-critical technologies for the energy and process sectors, with deep expertise in rotating equipment. Its portfolio includes mechanical seals, couplings, filtration systems, asset management solutions, and digital diagnostics. Built on more than a century of innovation and service, the business supports dependable and sustainable operations for customers across the globe. It also continues to develop technologies that support cleaner energy options for the future. As part of Smiths Group plc, a FTSE 100 company, the organization operates through more than 200 service centers in 50 countries and reported nearly £1 billion in revenue in 2022.

Role overview

The Lead DevSecOps Engineer will be responsible for strengthening the security of the IIoT platform and embedding security practices across delivery and operations. The position requires secure-by-design thinking, practical risk reduction, and close collaboration with technical and business stakeholders in cloud, hybrid, enterprise, and industrial environments.

Key accountabilities

• Integrate security practices into CI/CD workflows and keep them consistently enforced.
• Run ongoing vulnerability tracking, prioritization, and remediation efforts.
• Protect cloud and infrastructure environments, including infrastructure as code.
• Manage secrets, privileged access, and related security controls.
• Oversee monitoring, incident handling, and compliance-related activities.

Key activities

• Support the security posture of the IIoT platform end to end.
• Ensure solutions are engineered with security built in and compliance considered from the start.
• Reduce security exposure while avoiding disruption to industrial operations.
• Offer timely, practical security advice to internal and external stakeholders.
• Coordinate and lead responses to security incidents.
• Develop confidence among customers, auditors, and internal teams through reliable security practices.

Responsibilities

• Design, implement, and maintain security controls across the CI/CD pipeline.
• Identify, assess, rank, and remediate vulnerabilities across systems and applications.
• Secure cloud infrastructure, access management, and secret-handling processes.
• Apply DevSecOps principles to software delivery and operational security.
• Work across cloud, hybrid, enterprise, and on-premises environments with exposure to IIoT and OT platforms.
• Support incident response and broader security operations activities.

Qualifications

• At least 7 years of relevant experience.
• Bachelor’s degree or an advanced degree in computer science or a related field.
• Exposure to cloud, hybrid, and enterprise environments, with experience in IIoT and OT platforms preferred.

Technical skills and certifications

• Cloud security architecture, preferably in Azure.
• Secure application development and vulnerability management.
• DevSecOps concepts and CI/CD security integration.
• Enterprise and on-premises security controls.
• Incident response and security operations.
• Certified Kubernetes Administrator (CKA).
• Certified Kubernetes Security Specialist (CKS), preferred.
• Exposure to ISO 27001 and ISO 27002.
• Exposure to the NIST Cybersecurity Framework.
• Exposure to IEC 62443 industrial security standards.
• Cloud security certifications in Azure or AWS are desirable.

People skills

• Ability to collaborate effectively with diverse, cross-functional teams in a fast-moving business environment.
• Strong written and verbal communication skills.

Additional information

The organization values diversity and inclusion, supported by employee resource groups such as Veterans, Pride Network, Black Employee Network, Women@Work Network, and Neurodiversity. Recognition of outstanding work is highlighted through the Smiths Excellence Awards, announced on Smiths Day. Competitive compensation and benefits are offered, along with the opportunity to contribute to a more sustainable future.

Equal opportunity and hiring integrity

All qualified applicants are considered fairly regardless of color, religion, sex, sexual orientation, gender identity, national origin, economic status, disability, age, or other legally protected characteristics. The company maintains an inclusive culture grounded in equality and ethics. No payment is ever requested during the hiring process by the company or its recruitment partners, including for interviews or tests. Candidates should apply only through the official careers website to avoid fraud.