DevSecOps & Security Architect

Role Profile

We're looking for an experienced DevSecOps & Governance Architect to join a major technology transformation programme, helping define secure, scalable and governed DevSecOps platforms across the enterprise. This is an architecture-focused role, requiring someone who can bridge security, governance and engineering - translating policy and risk requirements into practical, reusable technical patterns without unnecessarily impacting developer productivity.

Key Responsibilities

• Define target and transitional DevSecOps platform architectures.
• Design secure software supply-chain capabilities including SCA, vulnerability scanning, secrets detection, licence controls, SBOMs, signing and provenance.
• Assess and recommend vendor solutions, technologies and deployment options.
• Establish approved, controlled and unsupported usage patterns.
• Design governance, exception handling and risk-acceptance mechanisms.
• Ensure platforms and solutions align with enterprise architecture, security and regulatory obligations.
• Create reusable reference architectures and patterns that can scale across multiple domains.
• Improve platform reliability, build success, performance and supportability.
• Work closely with security, architecture, engineering, delivery and business stakeholders.

Essential Experience

• Strong background in Enterprise DevSecOps and platform architecture.
• Extensive experience across CI/CD, artefact repositories, containers, runtime provisioning and enterprise integrations.
• Strong understanding of software supply-chain security, including SCA, vulnerability scanning, SBOMs, secrets management and software signing/provenance.
• Experience with Identity, SSO, RBAC, logging and auditable security controls.
• Knowledge of Policy-as-Code and automated security enforcement.
• Understanding of DSPT/CAF-style assurance, governance and security requirements.
• Proven ability to translate risk and policy into practical engineering solutions.
• Excellent architecture workshop, stakeholder management and decision-facilitation skills.
• Able to balance security, governance and developer experience/productivity.