Senior DevSecOps Architect for Secure Cloud & Compliance

Northbridge; Stockholms kommun; On-site; SEK 1,400,000 - 2,100,000; Full time

Benefits offered by this job

Competitive compensation package (80/0

70/30 or 70/25 split

Job summary

Northbridge Security is seeking a Senior DevSecOps Engineer to lead security and platform work in client engagements, from architecture to implementation. You set the direction for embedding security into delivery and ensure the client's team can own it after you leave.

The role spans cloud, CI/CD security, and governance with emphasis on Zero Trust and automated checks. You will work with senior clients, architects, and engineers to deliver secure pipelines and platforms, while shaping security

Qualifications

• Minimum 10 years in DevOps, platform, infrastructure or security roles with a clear security focus.
• Experience establishing DevSecOps practices in one or more organisations.
• Architect level experience with AWS and/or Azure, plus hands-on experience with Kubernetes and Infrastructure as Code.
• Experience integrating security tooling into pipelines, from SAST and SCA to container and IaC scanning.
• Ability to turn frameworks such as ISO 27001, CIS Benchmarks or NIST into automated controls.
• Comfortable in front of clients, explaining a risk to both a developer and a CISO, fluent in Swedish and English.

Responsibilities

• Design DevSecOps architecture, security baselines and standards for client cloud and delivery platforms
• Build CI/CD pipelines with built in controls: SAST, SCA, secrets, container and IaC scanning, and SBOM generation
• Automate compliance checks and evidence collection, so audits become a byproduct of delivery
• Architect landing zones, identity and access based on Zero Trust and least privilege
• Lead threat modelling, security reviews and incident response
• Build developer platforms and golden paths where the secure choice is also the easy one
• Advise client technical leadership and coach their teams

Skills

DevOps

Security

Cloud architecture

Zero Trust

Client leadership

Tools

Terraform

Pulumi

Bicep

AWS CDK

CodeQL

Semgrep

Snyk

Trivy

Wiz

Job description

Northbridge Security is seeking a Senior DevSecOps Engineer to lead security and platform work in client engagements, from architecture to implementation. You set the direction for embedding security into delivery and ensure the client's team can own it after you leave.

The role spans cloud, CI/CD security, and governance with emphasis on Zero Trust and automated checks. You will work with senior clients, architects, and engineers to deliver secure pipelines and platforms, while shaping security