Senior DevSecOps Architect: Secure-by-Design Pipelines

JPMorgan Chase & Co.; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

JPMorgan Chase & Co. seeks a Senior DevSecOps Architect to partner with cybersecurity and engineering teams across the International Consumer division. You will lead threat modeling, embed security into CI/CD, and drive secure-by-design architecture for cloud-native products.

You will champion IaC security, automate guardrails, and collaborate globally to align with audit, regulatory, and risk initiatives while advancing DevSecOps maturity.

Qualifications

• Advanced threat modeling for DevOps pipelines and toolchains.
• Expertise in secure pipeline architecture using Policy-as-Code and automated gates.
• Hands-on security in AWS and GCP.
• Experience creating reference architectures for engineering teams.
• Ability to deploy automated guardrails at scale.
• Experience with IaC scanning across Terraform and Kubernetes manifests.
• Experience with SAST, SCA, RASP, IAST, container and image scanning, secrets detection, and AI-powered DAST.

Responsibilities

• Design, implement, and improve security architecture for CI/CD pipelines.
• Lead IaC and Security-as-Code practices with policy enforcement and automated validation.
• Lead threat modeling and architecture reviews for pipelines, microservices, and cloud-native apps.
• Design and deploy automated guardrails to reduce risk in pipelines and cloud environments.
• Foster a security-first culture with developer-friendly tooling and training.
• Manage emerging security issues and support audit and regulatory activities.

Skills

Threat modeling

Policy-as-Code

Cloud security (AWS/GCP)

IaC security

Security tooling stack

Communication

Tools

Terraform

Kubernetes

CI/CD tooling

Job description

JPMorgan Chase & Co. seeks a Senior DevSecOps Architect to partner with cybersecurity and engineering teams across the International Consumer division. You will lead threat modeling, embed security into CI/CD, and drive secure-by-design architecture for cloud-native products.

You will champion IaC security, automate guardrails, and collaborate globally to align with audit, regulatory, and risk initiatives while advancing DevSecOps maturity.