Senior DevSecOps Architect — Secure-by-Design Leader

JPMorganChase; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

JPMorganChase in London seeks a Senior DevSecOps Architect to lead security for CI/CD pipelines and cloud-native services. You will embed security into design, drive threat modeling, and govern automated controls across teams, supporting audit, regulatory, and risk initiatives with a cloud-first mindset.

You will collaborate with cybersecurity and engineering talent, shaping secure product delivery and enabling safe, innovative technology globally.

Qualifications

• Advanced threat modeling experience for DevOps/CICD pipelines.
• Expert ability to advise secure pipeline architecture using Policy-as-Code.
• Hands-on security expertise in AWS and GCP.
• Experience creating reference architectures for engineering teams.
• Ability to design scalable automated guardrails in pipelines.
• Experience leveraging IaC scanning for misconfigurations and compliance.

Responsibilities

• Pipeline Security Architecture - design and improve security for CI/CD pipelines and toolchains.
• Security-as-Code Leadership - promote IaC & Security-as-Code, policy enforcement, and automated compliance.
• Threat Modeling & Architecture Reviews - lead STRIDE-LM modeling for pipelines and cloud-native apps.
• Automated Guardrails at Scale - deploy automated preventive/detective controls across environments.
• Security Culture & Enablement - provide tooling and training to foster a secure delivery culture.
• Risk & Issue Management - monitor risks and coordinate resolutions with IT risk and cyber domains.
• Audit & Regulatory Support - provide evidence of control effectiveness for audits.
• Continuous Improvement - drive adoption of AI-assisted validation in SDLC/toolchain.

Skills

Threat modeling

Security architecture influence

Security culture enablement

Risk management

Stakeholder communication

Cloud security

Tools

AWS

GCP

Terraform

Kubernetes

SAST

SCA

RASP

IAST

DAST (AI-powered)

SBOM management

Job description

JPMorganChase in London seeks a Senior DevSecOps Architect to lead security for CI/CD pipelines and cloud-native services. You will embed security into design, drive threat modeling, and govern automated controls across teams, supporting audit, regulatory, and risk initiatives with a cloud-first mindset.

You will collaborate with cybersecurity and engineering talent, shaping secure product delivery and enabling safe, innovative technology globally.