Enterprise Security Architect/DevSecOps

<p class="text-muted mb-3">We’re hiring an Enterprise Security Architect to sit right between architecture and engineering on a major on‑prem Private Cloud build. This isn’t a public‑cloud security role — you’ll be shaping the security foundations of a brand‑new private cloud infrastructure, built using open‑source software stacks and modern platform‑engineering practices.</p>

<p class="text-muted mb-3">The RoleEmbedded full‑time within an engineering‑led programme, you’ll be the dedicated security partner — threat‑modelling the platform, defining secure designs, validating controls, and embedding DevSecOps across the stack. You’ll work directly with architects and engineers to turn threats into real mitigations, automated tests, hardened configurations and auditable evidence.</p>

<h5 class="fw-bold text-success mt-4 mb-3">Key Responsibilities</h5>

<p class="text-muted mb-3">Own and evolve threat modelling across the platform, infra, workloads and onboarding pathways.</p>

<p class="text-muted mb-3">Translate threat stories into engineering</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements, acceptance criteria and delivery priorities.</h5>

<p class="text-muted mb-3">Drive secure‑by‑design through IaC, CI/CD, policy‑as‑code and hardened image pipelines.</p>

<p class="text-muted mb-3">Define reusable standards for identity, privileged access, secrets, PKI, segmentation, logging and recovery.</p>

<p class="text-muted mb-3">Translate NIST/STIG frameworks into pragmatic, testable controls.</p>

<p class="text-muted mb-3">Automate posture, evidence and continuous validation across the platform.</p>

<p class="text-muted mb-3">Act as the security conduit across engineering, programme leadership and enterprise security.What You’ll Bring</p>

<p class="text-muted mb-3">Proven experience building private cloud infrastructure — not just consuming public cloud.</p>

<p class="text-muted mb-3">Strong background with open‑source infrastructure stacks, containerisation and platform technologies.</p>

<p class="text-muted mb-3">Deep hands‑on security architecture + engineering experience across large-scale datacentre or hybrid environments.</p>

<p class="text-muted mb-3">Strong threat‑modelling and attack‑path analysis skills.</p>

<p class="text-muted mb-3">Practical knowledge of compute, virtualisation, containers, orchestration, storage, networking and platform management.</p>

<p class="text-muted mb-3">Experience with IaC, CI/CD, policy‑as‑code and hardened image pipelines.</p>

<p class="text-muted mb-3">Expertise in PKI, secrets, privileged access, segmentation, workload isolation and infra hardening.</p>

<p class="text-muted mb-3">Ability to define reusable patterns, measurable criteria and security standards.</p>

<p class="text-muted mb-3">Experience with automated testing, attack simulation and vulnerability management.</p>

<p class="text-muted mb-3">Credibility to influence multidisciplinary engineering teams and balance risk vs delivery</p>