DevSecOps Architect in Reading, Berkshire

The Opportunity

We are seeking an experienced DevSecOps Architect to join a high-profile engineering programme, leading the design and evolution of a secure, scalable DevSecOps ecosystem supporting cloud-native software delivery.

This is a key technical leadership role responsible for defining DevSecOps strategy, architecture, engineering standards, and secure software delivery practices across a complex enterprise environment. You'll work closely with cloud, platform, security, and software engineering teams to deliver resilient, automated, and secure development platforms.

Experience within the Defence or Public Sector is highly desirable.

Key Responsibilities

• Design and evolve the overall DevSecOps architecture supporting cloud-native and hybrid environments.
• Define reference architectures, technical standards, and best practices for CI/CD platforms and automation services.
• Produce and maintain architecture documentation, technical designs, interface specifications, and operational procedures.
• Design secure CI/CD pipelines incorporating Secure-by-Design and DevSecOps principles.
• Define strategies for Infrastructure as Code (IaC), configuration management, secrets management, and policy enforcement.
• Design Kubernetes-based deployment architectures for scalable, resilient containerised applications.
• Define GitOps, release management, and multi-environment deployment strategies.
• Integrate security capabilities including SAST, DAST, Software Composition Analysis (SCA), container image scanning, vulnerability management, and policy-as-code into the software delivery lifecycle.
• Collaborate with cybersecurity teams to ensure compliance with security standards and programme requirements.
• Provide technical leadership, mentoring, and architectural guidance to engineering teams.
• Evaluate emerging technologies and recommend continuous improvements to the DevSecOps platform.

Essential Skills & Experience

• Active SC Clearance (mandatory).
• Extensive experience designing and implementing enterprise-scale DevSecOps platforms.
• Strong knowledge of CI/CD technologies such as Azure DevOps, GitLab CI, Jenkins, or similar automation frameworks.
• Extensive experience with Kubernetes and container orchestration platforms, including OpenShift and/or upstream Kubernetes.
• Experience designing Infrastructure as Code solutions using Terraform, Ansible, or equivalent technologies.
• Strong understanding of cloud platforms, with Microsoft Azure experience preferred.
• Experience implementing GitOps methodologies and deployment automation.
• Strong knowledge of container security, identity and access management (IAM), secrets management, and Zero Trust security principles.
• Experience producing architecture documentation, technical specifications, and solution design artefacts.
• Solid understanding of software engineering best practices, Agile delivery, and DevOps culture.
• Familiarity with recognised security frameworks such as NIST, ISO 27001, CIS Benchmarks, or equivalent.

Why Apply?

This is an excellent opportunity to influence the architecture of a modern, secure DevSecOps platform supporting a large-scale engineering programme. You'll work alongside highly skilled technical teams, shaping the future of secure software delivery through cloud-native technologies, automation, and security-first engineering practices.

If you're an SC-cleared DevSecOps Architect with a passion for secure cloud platforms and enterprise-scale architecture, we'd love to hear from you.

Disclaimer

This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.