Secure-by-Design DevSecOps Architect

Next Frontier Capital; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

JPMorganChase is seeking a Senior DevSecOps Architect to partner with technology and business teams, embedding security into CI/CD pipelines and leading threat modeling and architecture reviews. You will drive secure-by-design delivery and develop automated security controls across cloud environments.

You will champion Policy-as-Code, deploy guardrails at scale, and help the organization meet regulatory expectations while enabling secure innovation globally.

Qualifications

• Advanced threat modeling experience for DevOps/CICD pipelines.
• Expert advice on secure pipeline architecture using Policy-as-Code.
• Hands-on security in AWS and GCP.
• Experience creating reference architectures for engineering teams.
• Design and deployment of automated guardrails at scale.
• IaC scanning to detect misconfigurations across Terraform and Kubernetes.
• Experience with SAST, SCA, RASP, IAST, container and image scanning, secrets detection, and DAST.
• Experience managing SBOMs for supply chain security.
• Ability to solve design and functionality problems independently.
• Strong written and verbal communication.
• Proven ability to influence peers and stakeholders.
• Ability to evaluate emerging technologies for future state architecture.

Responsibilities

• Design and improve security architecture for CI/CD pipelines and toolchains.
• Champion IaC and Security-as-Code practices across cloud environments.
• Lead threat modeling and architecture reviews for pipelines, microservices, and cloud-native apps.
• Deploy automated guardrails to reduce risk across CICD pipelines, cloud and SaaS environments.
• Foster a security-first culture with developer-friendly tooling and training.
• Support audit, regulatory, and risk activities with automated controls.

Skills

Threat modeling

Policy-as-Code

AWS & GCP

Reference architectures

Guardrails automation

IaC scanning

DevSecOps tooling

SBOMs

Problem solving

Communication

Stakeholder influence

Emerging tech evaluation

Tools

Terraform

Kubernetes

SAST tooling

IAST tooling

DAST tooling

Job description

JPMorganChase is seeking a Senior DevSecOps Architect to partner with technology and business teams, embedding security into CI/CD pipelines and leading threat modeling and architecture reviews. You will drive secure-by-design delivery and develop automated security controls across cloud environments.

You will champion Policy-as-Code, deploy guardrails at scale, and help the organization meet regulatory expectations while enabling secure innovation globally.