Private Cloud Security Architect & DevSecOps

SoCode Limited; Cambridge; On-site; GBP 90,000 - 130,000; Full time

Job summary

SoCode Limited is hiring an Enterprise Security Architect to sit between architecture and engineering on a major on‑prem Private Cloud build. You will shape security foundations of a brand‑new private cloud, built with open‑source stacks and modern platform engineering practices, embedding security across the stack.

You’ll threat‑model the platform, define secure designs, validate controls, and implement DevSecOps with automated tests, hardened configurations and auditable evidence, working

Qualifications

• Proven experience building private cloud infrastructure, not just public cloud.
• Strong background with open‑source infrastructure stacks, containers, and platform technologies.
• Hands‑on security architecture and engineering across large‑scale datacentre or hybrid environments.
• Expertise in threat modelling and attack‑path analysis.

Responsibilities

• Own and evolve threat modelling across the platform, infra, workloads and onboarding pathways.
• Translate threat stories into engineering requirements, acceptance criteria and delivery priorities.
• Drive secure‑by‑design through IaC, CI/CD, policy‑as‑code and hardened image pipelines.
• Define reusable standards for identity, privileged access, secrets, PKI, segmentation, logging and recovery.
• Translate NIST/STIG frameworks into pragmatic, testable controls.
• Automate posture, evidence and continuous validation across the platform.
• Act as the security conduit across engineering, programme leadership and enterprise security.

Skills

Threat modelling

Open‑source stacks

Platform technologies

Security architecture

DevSecOps

IaC

CI/CD

PKI

Secrets management

Vulnerability management

Job description

SoCode Limited is hiring an Enterprise Security Architect to sit between architecture and engineering on a major on‑prem Private Cloud build. You will shape security foundations of a brand‑new private cloud, built with open‑source stacks and modern platform engineering practices, embedding security across the stack.

You’ll threat‑model the platform, define secure designs, validate controls, and implement DevSecOps with automated tests, hardened configurations and auditable evidence, working