Enterprise Security Architect/DevSecOps

SoCode; Town Of Cambridge; On-site; AUD 67,000 - 76,000; Full time

Benefits offered by this job

Remote

UK Travel

Job summary

SoCode in Cambridge is hiring an Enterprise Security Architect to sit between architecture and engineering on a major on-prem Private Cloud build. This isn’t a public-cloud security role — you’ll shaping the security foundations of a private cloud infrastructure built with open-source stacks and modern platform‑engineering practices.

Embedded full-time within an engineering-led programme, you’ll be the dedicated security partner — threat-modelling the platform, defining secure designs,

Qualifications

• Proven experience building private cloud infrastructure.
• Strong background with open-source infrastructure stacks and platform technologies.
• Deep hands-on security architecture across large-scale data-centre or hybrid environments.
• Strong threat-modelling and attack-path analysis skills.

Responsibilities

• Own and evolve threat modelling across the platform, infra, workloads and onboarding pathways.
• Translate threat stories into engineering requirements and delivery priorities.
• Drive secure-by-design through IaC, CI/CD, policy-as-code and hardened image pipelines.
• Define reusable standards for identity, privileged access, secrets, PKI, segmentation, logging and recovery.
• Translate NIST/STIG frameworks into pragmatic, testable controls.
• Automate posture, evidence and continuous validation across the platform.
• Act as the security conduit across engineering, programme leadership and enterprise security.

Job description

Posted 02 October 2026 Salary £850 per day, Benefits: Inside IR35 Location Cambridge Job type Contract Discipline Cybersecurity, Risk and Compliance , IT Infrastructure and Support Reference AH-103

We’re hiring an Enterprise Security Architect to sit right between architecture and engineering on a majoron‑prem Private Cloud build. This isn’t a public‑cloud security role — you’ll be shaping the security foundations of a brand‑new private cloud infrastructure, built using open‑source software stacks and modern platform‑engineering practices.

The Role

Embedded full‑time within an engineering‑led programme, you’ll be the dedicated security partner — threat‑modelling the platform, defining secure designs, validating controls, and embedding DevSecOps across the stack. You’ll work directly with architects and engineers to turn threats into real mitigations, automated tests, hardened configurations and auditable evidence.

Key Responsibilities

• Own and evolve threat modelling across the platform, infra, workloads and onboarding pathways.
• Translate threat stories into engineering requirements, acceptance criteria and delivery priorities.
• Drive secure‑by‑design through IaC, CI/CD, policy‑as‑code and hardened image pipelines.
• Define reusable standards for identity, privileged access, secrets, PKI, segmentation, logging and recovery.
• Translate NIST/STIG frameworks into pragmatic, testable controls.
• Automate posture, evidence and continuous validation across the platform.
• Act as the security conduit across engineering, programme leadership and enterprise security.

What You’ll Bring

• Proven experience building private cloud infrastructure — not just consuming public cloud.
• Strong background with open‑source infrastructure stacks, containerisation and platform technologies.
• Deep hands‑on security architecture + engineering experience across large-scale datacentre or hybrid environments.
• Strong threat‑modelling and attack‑path analysis skills.
• Practical knowledge of compute, virtualisation, containers, orchestration, storage, networking and platform management.
• Experience with IaC, CI/CD, policy‑as‑code and hardened image pipelines.
• Expertise in PKI, secrets, privileged access, segmentation, workload isolation and infra hardening.
• Ability to define reusable patterns, measurable criteria and security standards.
• Experience with automated testing, attack simulation and vulnerability management.
• Credibility to influence multidisciplinary engineering teams and balance risk vs delivery.

£35000 - £40000 per annum, Benefits: Remote, SW UK Travel