Senior DevSecOps Security Architect – Cloud-Native Banking

UST Global; Nottingham; Hybrid; GBP 39,000 - 79,000; Full time

Job summary

UST Global is hiring a Principal Security Architect - DevSecOps to embed security across our cloud-native banking platform. You will drive security throughout design, build, test, deployment, and operations, shaping guardrails and patterns with global teams.

The role demands leadership in secure engineering, policy-as-code, and production readiness, with emphasis on IAM, zero trust, and SCA/DAST integration across CI/CD pipelines and cloud services.

Qualifications

• 8+ years in software, security, cloud security, DevSecOps, or platform engineering.
• Strong software engineering background with code review and CI/CD knowledge.
• Proven experience securing cloud-native platforms in production.
• Deep knowledge of secure SDLC, threat modeling, automated testing, and risk controls.
• Experience integrating SAST/DAST/SCA into CI/CD workflows.
• Kubernetes security experience including RBAC, policies, network policies, and runtime protection.
• Knowledge of IAM, least privilege, zero trust, and workload identity.
• Experience with policy-as-code tools like OPA, Gatekeeper, or Kyverno.
• Experience with secrets management, data protection, and auditability.
• Preferred: AWS security, EKS, IaC security, GitOps, software supply-chain security, observability.

Responsibilities

• Define and evolve the DevSecOps strategy for our cloud-native banking transformation platform.
• Embed security across the SDLC, including design, coding, build, test, deployment, runtime, monitoring, and incident response.
• Design and implement automated security controls across CI/CD pipelines, infrastructure provisioning, application delivery, container images, Kubernetes, and cloud services.
• Integrate and operationalize SAST, DAST, SCA, container scanning, secrets scanning, and policy-as-code.
• Define secure engineering standards and reusable guardrails that help teams move quickly within approved boundaries.
• Apply cloud-native security patterns for IAM, network segmentation, workload identity, secrets management, least privilege, zero trust, runtime security, and auditability.
• Guide secure architecture for APIs, microservices, event-driven systems, SaaS integrations, and developer tooling.
• Partner with platform, backend, DevOps, QA, product, and delivery teams to build security into delivery.
• Mentor engineers through design reviews, threat modeling, code and pipeline reviews, and pairing.
• Ensure production systems are secure, observable, resilient, compliant, and ready for regulated banking.
• Work with CTO to define standards, identify gaps, improve delivery quality, and reflect architecture in production code and practices.
• Influence multiple teams, establish reusable standards, mentor leaders, and turn technical direction into production-ready execution.

Skills

Security engineering

Cloud security

DevSecOps

Platform ownership

CI/CD

Threat modeling

SAST/DAST/SCA

Kubernetes security

IAM/zero trust

Secrets management

Tools

AWS

Kubernetes

Terraform

GitOps

OPA

Gatekeeper

Kyverno

OpenTelemetry

Prometheus

CloudWatch

Secrets vault

Job description

UST Global is hiring a Principal Security Architect - DevSecOps to embed security across our cloud-native banking platform. You will drive security throughout design, build, test, deployment, and operations, shaping guardrails and patterns with global teams.

The role demands leadership in secure engineering, policy-as-code, and production readiness, with emphasis on IAM, zero trust, and SCA/DAST integration across CI/CD pipelines and cloud services.