Senior Principal Forward Deployed DevSecOps Engineer

About the Role

Would you like to work closely with scientists to bring AI, automation and data into the lab? Are you an experienced engineer who can get to the heart of a problem quickly, then design and build a solution that works and take it into production?

As a Senior Principal Forward Deployed DevSecOps Engineer in Labs & CMC Digital & Tech, you will work directly with our Product Owners, scientists and data engineering teams to shape and deliver digital products for the lab. This is a hands-on engineering role. The work could be orchestrating lab workflows, automating lab processes, or building agentic workflows that take manual and repetitive work away from scientists. Where a solution needs data, you will work with data engineering to land it and then build on top of it. Strong DevSecOps and cloud infrastructure skills are a big part of the job, so that security, automated testing, monitoring and repeatable infrastructure are there from the start and we can release often with confidence. You will own your work from early discovery through to production and beyond, and as one of the more senior engineers in the team you will help others develop too.

We care about software that scientists use every day. That means less manual lab work, fewer errors, better data, and medicines and vaccines moving through the pipeline faster.

Why This Role Exists

Labs & CMC is changing how laboratory science and CMC work gets done, using digital technology, data, automation and AI. To make that happen we need senior engineers who can work directly with Product Owners and scientists, understand the science and the GxP context well enough to ask the right questions, and then lead the design and build of a sound solution. This is a broad role. Data is part of it, but so are lab automation, systems integration, agentic workflows that cut down manual effort, and the DevSecOps and cloud infrastructure that keeps it all running.

• Shaping the solution: working with Product Owners and scientists to understand the problem, pairing with them on the options, and driving towards a solution that is technically sound and fits how the lab works.

• Moving quickly: designing and building PoCs, PoVs and MVPs on real lab data in days or weeks, and giving a clear view on whether each one should go further.

• Automating the lab: connecting instruments, lab systems, inventory and data platforms, and building automated and agentic workflows that reduce manual activity for scientists.

• Landing the data: working with data engineering teams to get the right data in place and in the right shape, so solutions, analytics and machine learning can be built on it.

• Getting to production safely and often: taking proven ideas through to secure, supportable and compliant products, with infrastructure as code, CI/CD, automated testing and monitoring built in so changes can be released quickly and with confidence.

• Building for reuse: leaving behind orchestration patterns, agents and components that other teams across Labs & CMC can use.

Key Responsibilities

Discovery, Solution Design and Prototyping

• Work directly with Product Owners, scientists and data engineering teams to understand lab workflows, the data involved, the constraints and what a good outcome looks like.

• Pair with Product Owners to shape both the problem and the solution, challenge requirements where needed, and recommend the right technical approach.

• Design and build PoCs, PoVs and MVPs in short cycles using real lab data and systems, with regular feedback from scientists.

• Look at feasibility, usability, data quality and compliance early. Estimate the benefit in time saved, errors avoided and manual effort removed, and recommend whether to continue, change direction or stop.

Engineering and Delivery

• Write, test and ship code, and own the technical design of the products you work on.

• Lead the move from MVP to production, covering architecture, integration, testing, security, deployment, monitoring, documentation and support handover. Where the route is clear, ship it yourself.

• Keep technical debt under control and hand over cleanly to product and platform teams with working code, design notes and known risks.

DevSecOps, Quality and Observability

• Set up and maintain a streamlined SDLC for your products, with CI/CD pipelines that let the team release small changes often and safely.

• Build automated testing into every pipeline, including unit, integration, end-to-end and performance tests, so quality checks run on every change and not just before a release.

• Build security in from the start through secure coding, dependency and container scanning, static and dynamic code analysis, and secrets management. Fix vulnerabilities promptly in line with GSK cyber security standards.

• Make sure solutions meet requirements for privacy, data integrity, and GxP and computer system validation where they apply. Where possible, use the pipeline to generate test evidence and audit trails automatically.

• Design observability in from day one, with logging, metrics, tracing, dashboards and alerts using tools such as Grafana, Prometheus and Elastic.

• Integrate products with ServiceNow for incident, change and service management so they are ready for support and operational handover.

• Track delivery and service measures such as deployment frequency, lead time, change failure rate and time to restore, and use them to keep improving how the team works.

Cloud Infrastructure

• Work with the GSK central Digital Platforms team to get the cloud infrastructure your products need, for example on Azure or GCP. Be clear about what is needed, review designs, and make sure it fits the solution.

• Use your knowledge of cloud networking, identity, access and security to design solutions that run well on that infrastructure, and to work through issues when they come up.

• Where needed, provision and configure infrastructure yourself using infra