Cloud Security Architecture & DevSecOps Lead

PCI Pal; Ipswich; Hybrid; GBP 110,000 - 150,000; Full time

Benefits offered by this job

25 days holiday

Medical insurance

Dental insurance

Optical insurance

Work from home options

EV scheme

Work from anywhere policy

Training and development

Team events

Job summary

PCI Pal is seeking an Information Security Architecture & Engineering Lead to own cloud security architecture, DevSecOps, secure SDLC and security automation within its UK team.

You will drive threat modelling, CI/CD security gates, IaC scanning, and provide central security advisory to Engineering, Product and Pre-Sales, while coordinating with AI security governance and PCI DSS compliance.

Qualifications

• Cloud security architecture experience with AWS and Azure.
• Hands-on DevSecOps: CI/CD security and IaC scanning.
• Strong coding in Python and C#/.NET; read/write secure production code.
• Security automation and tooling development.
• Threat-modelling at design stage for cloud workloads.
• Familiarity with PCI DSS v4.0.1 and ISO/IEC 27001:2022.
• Experience remediating CNAPP or cloud posture findings.
• Oversight of offshore or distributed engineering teams.
• Strong stakeholder communication and documentation skills.
• Experience with AI/LLM security testing.
• Microsoft 365 E5 security stack familiarity.
• Container/Kubernetes security experience.
• Certifications: CISSP, CCSP, AWS Certified Security Specialty.
• Experience in PCI DSS Level 1 environments.
• Experience transitioning to architecture- and engineering-led model.

Responsibilities

• Own cloud security architecture review and sign-off for AWS production changes.
• Threat-model new cloud services before go-live.
• Lead CNAPP remediation design and guardrails for security findings.
• Develop security automation and tooling with Python and C#/.NET.
• Provide secure SDLC guidance and run central advisory model.
• Extend coverage to container and API security as deployment grows.
• Provide technical security voice in pre-sales conversations and product design.
• Lead threat-modelling cycles for major product changes.
• Report progress and risk into GRC and Information Security leadership.

Skills

Cloud security

DevSecOps

Python

C#/.NET

PowerShell

Bash

AWS

Azure

Threat modelling

Documentation

Job description

PCI Pal is seeking an Information Security Architecture & Engineering Lead to own cloud security architecture, DevSecOps, secure SDLC and security automation within its UK team.

You will drive threat modelling, CI/CD security gates, IaC scanning, and provide central security advisory to Engineering, Product and Pre-Sales, while coordinating with AI security governance and PCI DSS compliance.