Xcede
DevSecOps Architect
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
DevSecOps & Governance Architect
Location: London / Manchester – Mainly Remote
Contract: 4-6 months initial contract, with potential for extension
Clearance: Active SC Clearance required
Start: October 2026
We are looking for an experienced DevSecOps & Governance Architect to support a major enterprise technology transformation programme within a large UK public sector organisation.
This is a senior architecture role focused on helping define and establish an enterprise DevSecOps and platform capability, balancing strong security and governance requirements with developer productivity and practical engineering needs.
You will be responsible for defining target and transitional architectures, establishing governance frameworks and creating reusable technical patterns that can be adopted across multiple teams and domains.
You'll work closely with security, architecture, engineering, delivery, and business stakeholders, translating organisational risk and policy into practical DevSecOps solutions.
Key Responsibilities
- Define target and transitional DevSecOps/platform architectures
- Design secure software supply-chain capabilities covering SCA, vulnerability scanning, secrets detection, SBOMs, software signing, and provenance
- Develop architecture patterns across CI/CD, artefact repositories, containers, and runtime provisioning
- Define identity, SSO, RBAC, logging, and auditable security controls
- Establish policy-as-code and automated security enforcement
- Assess and advise on vendor solutions and deployment options
- Define approved, controlled, and unsupported technology usage patterns
- Design governance, exception handling, and risk-acceptance mechanisms
- Create reusable reference architectures and patterns that can scale across multiple domains
- Facilitate architecture workshops and technical decision-making
- Ensure solutions align with enterprise architecture and security obligations
- Balance security controls with developer experience and engineering productivity
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Requirements
- Strong experience across DevSecOps, Platform Engineering, and Security/Enterprise Architecture, ideally within large or highly regulated organisations.
- Strong enterprise DevSecOps and platform architecture experience
- Excellent understanding of secure software supply chains
- Strong knowledge of CI/CD, containers, and Kubernetes
- Experience with SCA, vulnerability management, secrets management, and SBOMs
- Knowledge of policy-as-code and automated security controls
- Experience with identity, SSO, RBAC, and security governance
- Strong architecture documentation and reference-pattern experience
- Experience translating security policy and risk into practical engineering solutions
- Excellent stakeholder management and workshop facilitation skills
- The ability to influence across Security, Architecture, Engineering, and Delivery
- Knowledge of DSPT, CAF, or similar security/assurance frameworks would be highly beneficial
- Active SC Clearance is essential
Get help with your application
Your very own career expert that helps elevate your application to the next level.
The role is predominantly remote, with occasional site visits required in London and/or Manchester.
This is an opportunity to play a key role in shaping an enterprise DevSecOps capability, with a strong combination of architecture, security, governance, and platform engineering.
If you're an SC-cleared DevSecOps, Platform, Cloud Security, or Enterprise Architect looking for your next contract, we'd be keen to hear from you.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location