Build & Deployment Engineer - C#/.NET, Octopus Deploy & Secure Coding
City of London - Hybrid (4 Days on-site, 1 day WFH each week)
Inside IR35 Contract
Are you a build and deployment engineer who can open up the C# code behind a pipeline and fix it yourself? That combination is exactly what's needed here.
You'll join the Platform Engineering function of one of the world's largest financial groups, owning the on-premises toolchain that takes software from source code to production. GitHub Enterprise, TeamCity, JFrog Artifactory and Xray, and Octopus Deploy, all integrated with ServiceNow change and vulnerability management. In a regulated banking environment, every build and deployment has to be secure, repeatable, traceable and auditable - and making that happen is your job.
Alongside the platform work, you'll take technical ownership of secure coding standards: turning security policy into practical engineering controls that development teams inherit by default, rather than having to build for themselves. There's also a live migration of applications from legacy tooling onto Octopus Deploy to get stuck into.
What You'll Be Doing
- Engineering, administering and supporting the on-premises build, packaging, artefact and deployment toolchain
- Building and maintaining automated CI/CD pipelines and standard templates for application teams, across Windows and Linux environments
- Writing, reviewing and troubleshooting the C#/.NET code behind internal deployment integrations, APIs and automation tooling
- Diagnosing complex build and deployment failures across code, dependencies, build agents, artefact repositories and target environments
- Migrating applications from legacy deployment tooling onto Octopus Deploy
- Defining and embedding pipeline security controls - SAST, SCA, dependency scanning, secrets detection and artefact scanning (GitHub CodeQL, Dependabot, JFrog Xray and Curation)
- Managing software supply-chain controls: approved repositories, open-source governance, package lifecycle, traceability and SBOM
- Integrating deployment automation with change and release management, including segregation of duties and audit evidence
- Working with Cyber Security, Risk and Control and development teams to onboard applications and remediate vulnerabilities
- Supporting platform upgrades, patching, resilience, DR, monitoring and incident response
What You'll Bring
- Strong hands-on experience of enterprise software build, packaging and deployment engineering
- Strong C# development skills and a solid understanding of .NET Framework and modern .NET build and deployment - this is essential
- Practical experience with Visual Studio, MSBuild, NuGet, IIS, Windows services and REST APIs
- Administration or engineering experience with at least two of: Octopus Deploy, TeamCity, GitHub Enterprise, JFrog Artifactory, JFrog Xray, Azure DevOps Server
- Strong PowerShell, plus working knowledge of Bash/shell scripting
- Good understanding of Git workflows, artefact repositories, package versioning and environment promotion
- Experience implementing secure coding controls (SAST, SCA, secrets detection) and a good grasp of secure development principles, including authentication, secrets management, certificates and TLS
- Windows Server and on-premises hosting knowledge, working knowledge of Linux deployment patterns, and SQL Server database deployment (e.g. DACPAC)
- Experience working within formal change, incident and release management in a controlled, regulated environment
- Desirable: ASP.NET/ASP.NET Core, Entity Framework, NUnit/xUnit, ServiceNow integration, Terraform, Docker/Kubernetes, OWASP, SBOM standards, CyberArk
This is a chance to own the build and deployment platforms at the heart of a top-tier financial services technology function, and to shape how secure coding is done across it. Click apply now to submit your CV, or get in touch for a confidential conversation about the role before you do.
If you've held any of these roles or used these technologies/skills, this role could be a great fit: Build Engineer, Release Engineer, Deployment Engineer, Build & Release Engineer, DevOps Engineer, DevSecOps Engineer, CI/CD Engineer, Platform Engineer, Software Configuration Manager, Release Manager, Application Security Engineer, .NET Developer, C# Developer, Octopus Deploy Engineer, TeamCity Administrator, JFrog Artifactory Administrator, GitHub Enterprise Administrator, Azure DevOps Engineer, PowerShell Automation Engineer.
