DevSecOps & Security Architect

DevSecOps & Security Architect Rate: £650 (Inside IR35) Location: 5 months Location: Fully Remote Role Profile We're looking for an experienced DevSecOps & Governance Architect to join a major technology transformation programme, helping define secure, scalable and governed DevSecOps platforms across the enterprise.

This is an architecture-focused role, requiring someone who can bridge security, governance and engineering - translating policy and risk requirements into practical, reusable technical patterns without unnecessarily impacting developer productivity.

Key Responsibilities Define target and transitional DevSecOps platform architectures.<br />Design secure software supply-chain capabilities including SCA, vulnerability scanning, secrets detection, licence controls, SBOMs, signing and provenance.<br />Assess and recommend vendor solutions, technologies and deployment options.<br />Establish approved, controlled and unsupported usage patterns.<br />Design governance, exception handling and risk-acceptance mechanisms.<br />Ensure platforms and solutions align with enterprise architecture, security and regulatory obligations.<br />Create reusable reference architectures and patterns that can scale across multiple domains.<br />Improve platform reliability, build success, performance and supportability.<br />Work closely with security, architecture, engineering, delivery and business stakeholders.

Essential Experience Strong background in Enterprise DevSecOps and platform architecture.<br />Extensive experience across CI/CD, artefact repositories, containers, runtime provisioning and enterprise integrations.<br />Strong understanding of software supply-chain security, including SCA, vulnerability scanning, SBOMs, secrets management and software signing/provenance.<br />Experience with Identity, SSO, RBAC, logging and auditable security controls.<br />Knowledge of Policy-as-Code and automated security enforcement.<br />Understanding of DSPT/CAF-style assurance, governance and security requirements.<br />Proven ability to translate risk and policy into practical engineering solutions.<br />Excellent architecture workshop, stakeholder management and decision-facilitation skills.<br />Able to balance security, governance and developer experience/productivity.ECS Recruitment Group Ltd is acting as an Employment Business in relation to this vacancy