Senior DevSecOps Architect: Secure Cloud CI/CD Leader

Hackajob Ltd; Leeds; On-site; GBP 61,000 - 101,000; Full time

Job summary

JPMorganChase partnered role via hackajob seeks a Senior DevSecOps Architect to design secure CI/CD pipelines and cloud-native architectures. You will drive threat modeling, policy-as-code, and automated compliance while mentoring engineers and shaping secure patterns across teams.

The role emphasizes security tooling across SAST/ SCA/ RASP/ IAST, SBOM maturity, and regulated environments with 3LoD risk management.

Qualifications

• Advanced threat modeling experience (e.g., STRIDE-LM) for DevOps/CI/CD pipelines and toolchains.
• Ability to advise and influence secure pipeline architecture using Policy-as-Code and automated gates.
• Hands-on security expertise in AWS and GCP.
• Experience creating reference architectures and patterns for engineering teams.
• Design and deploy automated guardrails across CI/CD and cloud environments.

Responsibilities

• Design, implement, and continuously improve security architecture for CI/CD pipelines and toolchains.
• Champion IaC and Security-as-Code practices with policy enforcement and automated compliance.
• Lead advanced threat modeling and architecture reviews for secure patterns.
• Deploy automated preventive and detective guardrails to reduce risk.
• Provide developer-friendly tooling and training to foster a security-first culture.

Skills

Threat modeling

Policy-as-Code

DevSecOps

AWS

GCP

Kubernetes

IaC scanning

SAST

SCA

SBOMs

Mentoring

Communication

Emerging tech eval

Education

AWS Certified Security - Specialty

GCP Professional Cloud Security Engineer

CISSP

CKS

OSCP

Tools

Terraform

Job description

JPMorganChase partnered role via hackajob seeks a Senior DevSecOps Architect to design secure CI/CD pipelines and cloud-native architectures. You will drive threat modeling, policy-as-code, and automated compliance while mentoring engineers and shaping secure patterns across teams.

The role emphasizes security tooling across SAST/ SCA/ RASP/ IAST, SBOM maturity, and regulated environments with 3LoD risk management.