DevOps Engineer

This role focuses on designing and implementing GitLab-based CI/CD pipelines to deploy containerised services into AKS, while maintaining robust Docker image workflows and secure internal registry practices. You will define and manage AKS cluster configurations, ensure scalable workloads, and build Terraform modules aligned with Azure Landing Zone standards. Strong cloud engineering fundamentals and an automation-first mindset are essential.

You will manage secrets and access through Azure Key Vault and Azure AD, support hybrid connectivity using Greenlink, and collaborate closely with MLOps and Data Engineering teams to deliver reproducible, auditable infrastructure. The role also includes monitoring system health using tools such as Azure Monitor, Prometheus, and Grafana

Core Duties:

Designing and implementing GitLab-based CI/CD pipelines for deploying containerised services to AKS

Building and maintaining Dockerfiles and container image workflows, pushing to internal container registries

Defining and managing AKS cluster configurations, ensuring secure and scalable workloads

Writing and maintaining Terraform modules for provisioning cloud infrastructure in line with Azure Landing Zone standards

Managing secrets, configuration, and access using Azure Key Vault and Azure AD

Ensuring connectivity between on-prem services and Azure cloud infrastructure using Greenlink and hybrid networking

Collaborating with MLOps and Data Engineers to ensure reproducible, reliable, and auditable infrastructure across environments

Monitoring system health, logging, and metrics using platform observability tools (e.g. Azure Monitor, Prometheus, Grafana where applicable)

You will have experience of writing, maintaining and debugging CI/CD pipelines, ideally in GitLab CI

You will have experience of deploying and running applications on Kubernetes using Helm, ideally on Red Hat OpenShift

You will have experience of GitOps delivery, ideally with Argo CD, where every change reaches production through version control

Experience of building, scanning and maintaining container images and managing them through registries such as Harbor or Nexus

Understanding of secure deployment, including secrets management (such as HashiCorp Vault), least privilege access and single sign-on, ideally in restricted or air gapped environments

Experience of operating and troubleshooting services in production, using monitoring and logging tools such as Prometheus, Grafana and Loki

Join BAE Systems and you'll be part of something bigger. As a valued member of our global colleague network, you'll bring your unique skills and perspectives to help pioneer progress and protect what matters most. You'll be trusted to play your part in delivering the advanced, technology-led defence, aerospace and security solutions of tomorrow - shaping a safer future, for all of us., Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks.