DevSecOps & Governance Architect

Salary: £61,000 - 101,000 per year

Requirements

• Enterprise DevSecOps architecture and/or platform architecture.
• Secure software supply chains and modern software-delivery practices.
• CI/CD architecture and engineering tooling.
• SCA, vulnerability management/scanning and secrets detection.
• SBOMs, software signing and provenance.
• Artefact repositories and container platforms.
• Identity, SSO and RBAC.
• Logging, auditability and security-control design.
• Policy-as-code and automated security enforcement.
• Enterprise architecture and security governance.
• Translating cyber/security policies into practical engineering controls.
• Architecture workshops, technical decision-making and stakeholder engagement.
• Balancing strong security controls with developer experience and productivity.
• Working across security, architecture, engineering and delivery functions.

Responsibilities

• Define target and transitional architectures for enterprise DevSecOps and engineering platforms.
• Design secure software supply-chain approaches covering SCA, vulnerability scanning, secrets detection, licence controls, SBOMs, signing and provenance.
• Establish architectural patterns across CI/CD, artefact repositories, containerised environments and runtime provisioning.
• Design appropriate identity, SSO, RBAC, logging and auditing controls.
• Introduce policy-as-code and automated security enforcement into engineering workflows.
• Assess vendor platforms, tooling and deployment options against architectural and security requirements.
• Define approved, controlled and unsupported technology usage patterns.
• Design governance models covering exceptions, risk acceptance and security decision-making.
• Ensure platform designs align with wider enterprise architecture and security obligations.
• Develop reusable reference architectures and patterns that can scale across teams and domains.
• Facilitate architecture workshops and support technical decision-making across engineering, security and business stakeholders.

Technologies

• Architect
• CI/CD
• DevSecOps
• Support
• RBAC
• Security

More

We are seeking an experienced DevSecOps & Governance Architect to help shape secure engineering and platform architecture within a complex, security-conscious enterprise environment. This is a remote UK role, outside IR35, with a negotiable rate and a start date in mid October. The position sits at the intersection of DevSecOps, platform engineering, cyber security and enterprise architecture, with a focus on building secure, scalable engineering platforms that support developer productivity while meeting governance and security obligations. This role requires active SC clearance.

last updated 36 week of 2026