Open roleExternal
DevSecOps & Security Architect
- london, england, United Kingdom
- Permanent·Remote
- Full time
Job Description
DevSecOps & Security Architect
Rate: £650 (Inside IR35)
Location: 5 months
Location: Fully Remote
Role Profile
We're looking for an experienced DevSecOps & Governance Architect to join a major technology transformation programme, helping define secure, scalable and governed DevSecOps platforms across the enterprise.
This is an architecture-focused role, requiring someone who can bridge security, governance and engineering - translating policy and risk requirements into practical, reusable technical patterns without unnecessarily impacting developer productivity.
Key Responsibilities
- Define target and transitional DevSecOps platform architectures.
- Design secure software supply-chain capabilities including SCA, vulnerability scanning, secrets detection, licence controls, SBOMs, signing and provenance.
- Assess and recommend vendor solutions, technologies and deployment options.
- Establish approved, controlled and unsupported usage patterns.
- Design governance, exception handling and risk-acceptance mechanisms.
- Ensure platforms and solutions align with enterprise architecture, security and regulatory obligations.
- Create reusable reference architectures and patterns that can scale across multiple domains.
- Improve platform reliability, build success, performance and supportability.
- Work closely with security, architecture, engineering, delivery and business stakeholders.
Essential Experience
- Strong background in Enterprise DevSecOps and platform architecture.
- Extensive experience across CI/CD, artefact repositories, containers, runtime provisioning and enterprise integrations.
- Strong understanding of software supply-chain security, including SCA, vulnerability scanning, SBOMs, secrets management and software signing/provenance.
- Experience with Identity, SSO, RBAC, logging and auditable security controls.
- Knowledge of Policy-as-Code and automated security enforcement.
- Understanding of DSPT/CAF-style assurance, governance and security requirements.
- Proven ability to translate risk and policy into practical engineering solutions.
- Excellent architecture workshop, stakeholder management and decision-facilitation skills.
- Able to balance security, governance and developer experience/productivity.