Senior DevSecOps Architect: Cloud-Native Security Leader

UST FinX; United States; On-site; GBP 120,000 - 160,000; Full time

Job summary

UST FinX is seeking a Principal Security Architect — DevSecOps to embed security across the engineering lifecycle. You will design secure patterns, automate controls, and set guardrails across CI/CD, containers, Kubernetes, and SaaS integrations.

Lead threat modeling, reviews, and production readiness with a hands-on engineering approach. You will partner with platform, backend, DevOps, QA, and product teams to ensure security is built in by default and remains observable, compliant, and

Qualifications

• 8+ years in software, security, cloud security, DevSecOps, or platform engineering with production ownership.
• Strong software engineering background with ability to read real code and CI/CD workflows.
• Proven experience securing cloud-native platforms in production.
• Deep secure-SDLC knowledge: threat modeling, automated testing, vulnerability management, and release controls.
• Integrating SAST, DAST, and SCA into CI/CD in a practical, automated way.
• Container security: image scanning, runtime configuration, and deployment hardening.
• Kubernetes security: RBAC, namespaces, network policies, and runtime protection.
• Policy-as-code (OPA, Gatekeeper, Kyverno) and IAM/zero trust models.
• Secrets management: storage, rotation, access control, and governance.
• CI/CD security automation and software supply-chain security.
• Production security: reliability, observability, incident response.
• Strong communication and mentoring to raise engineering standards.
• Comfortable working in a global, distributed organization.

Responsibilities

• Define and evolve the DevSecOps strategy for UST FinX's cloud-native banking platform.
• Embed security across the SDLC — design, coding, build, test, deployment, runtime, monitoring, incident response.
• Implement automated security controls across CI/CD, infrastructure provisioning, and cloud services.
• Integrate and operate SAST, DAST, SCA, container scanning, and policy-as-code.
• Define secure engineering standards and reusable guardrails for fast, safe development.
• Apply cloud-native security patterns: IAM, least privilege, zero trust, runtime security.
• Guide secure architecture for APIs, microservices, and SaaS integrations.
• Partner with platform, backend, DevOps, QA, product, and delivery teams to bake security in.
• Mentor engineers through reviews, threat modeling, and pipeline security.
• Ensure production systems are secure, observable, resilient, compliant.

Skills

Security architecture

DevSecOps

Cloud security

SAST/DAST/SCA

Container security

Kubernetes security

Policy-as-code

Secrets management

CI/CD security

Production security

Mentoring/leadership

Communication

Tools

AWS security

Kubernetes

Terraform

CloudFormation

AWS CDK

GitOps

Job description

UST FinX is seeking a Principal Security Architect — DevSecOps to embed security across the engineering lifecycle. You will design secure patterns, automate controls, and set guardrails across CI/CD, containers, Kubernetes, and SaaS integrations.

Lead threat modeling, reviews, and production readiness with a hands-on engineering approach. You will partner with platform, backend, DevOps, QA, and product teams to ensure security is built in by default and remains observable, compliant, and