Lead DevSecOps Architect — Cloud-Native Security

UST; Nottingham; On-site; GBP 90,000 - 140,000; Full time

Job summary

UST FinX in Nottingham, UK, is seeking a Principal Security Architect - DevSecOps to embed security into every stage of our engineering lifecycle. You will design secure patterns, automate controls, and shape guardrails across cloud-native platforms, CI/CD pipelines, and APIs.

You'll balance security, speed, and operability, mentoring engineers and turning principles into production-grade code and configurations.

Qualifications

• 8+ years in software/security/devsecops or platform engineering with production ownership.
• Strong software engineering background: can read code, design systems, CI/CD workflows.
• Proven experience securing cloud-native platforms in production.
• Deep secure-SDLC knowledge: threat modeling, automated testing, vulnerability management.
• Integrating SAST, DAST, and SCA into CI/CD in an automated, developer-friendly way.
• Kubernetes security, IAM, least privilege, zero trust patterns.
• Strong communication and mentoring across global teams.
• Comfortable in a distributed international organization.

Responsibilities

• Define and evolve the DevSecOps strategy for cloud-native banking platform.
• Embed security across the SDLC – design, coding, build, test, deployment, runtime, monitoring.
• Design and implement automated security controls across CI/CD, infrastructure, containers, Kubernetes, and cloud services.
• Integrate and operationalize SAST, DAST, SCA, container scanning, secrets scanning, policy-as-code.
• Define secure engineering standards and reusable guardrails for fast but safe delivery.
• Apply cloud-native security patterns: IAM, least privilege, zero trust, runtime security, auditability.
• Guide secure architecture for APIs, microservices, event-driven systems, SaaS integrations.
• Mentor engineers through design reviews, threat modeling, code/pipeline reviews.
• Ensure production systems are secure, observable, resilient, compliant.

Skills

Cloud security

DevSecOps

Security architecture

Threat modeling

SAST/DAST/SA

Kubernetes security

Policy-as-code

IAM & zero trust

Security automation

Mentoring

Tools

AWS

Kubernetes

Terraform

CI/CD tooling

Open Policy Agent

GitOps

Cloud security tooling

Job description

UST FinX in Nottingham, UK, is seeking a Principal Security Architect - DevSecOps to embed security into every stage of our engineering lifecycle. You will design secure patterns, automate controls, and shape guardrails across cloud-native platforms, CI/CD pipelines, and APIs.

You'll balance security, speed, and operability, mentoring engineers and turning principles into production-grade code and configurations.