Senior DevSecOps Engineer - Outside IR35

Outside IR35, Dev Sec Ops  Engineer, Azure, AWS, Best practice, Regulatory Environment background, Mobile Application, Web Application, Greenfield Build, London  West Midlands. We are seeking a Senior Dev Sec Ops  Engineer to lead governance, architecture guidance, and assurance for Greenfield Web Application build across infrastructure security, Microsoft Azure, AWS, Kubernetes and key SaaS platforms. This role is pivotal in shaping technical blueprints, setting security standards, and ensuring regulatory compliance with Cyber Essentials Plus, ISO 27001, and Zero Trust principles.

You will act as the glue between IT and platform teams to embed best practices, validate implementations, and support audit readiness across IaaS, PaaS, and SaaS environments.

Key Responsibilities Define and maintain multi-cloud security standards and reference blueprints (e.g. Azure Policy/Initiatives, AWS Control Tower/SCPs) Own security architecture patterns and contribute to HLD/LLD, threat models, and risk assessments Set assurance criteria and control evidence requirements for internal teams and third-party vendors Establish policy-as-code requirements and maintain an exceptions register with expiry and risk ownership Define identity and access control standards (Entra l Access, MFA, PIM;

AWS IAM federation) Govern SaaS security onboarding (SSO, OAuth governance, DLP controls, vendor assessments) Strong regulatory sector experience Educate and influence teams through guidance, clinics, and coaching sessions Familiarity with IaaS, PaaS, SaaS risk models and audit frameworks Excellent written communication and facilitation skills to drive adoption and influence stakeholders Additional Skills

Certifications:

AZ-500, SC-100, SC-200, AZ-700, AWS Security Specialty, CISSP (or equivalents)

Experience with blueprint catalogues and architecture governance processes Working knowledge of containers/Kubernetes (AKS/EKS) policy models While this role focuses on governance and assurance, hands-on use may be required for validation:
Azure :
Policy/Initiatives, Defender for Cloud, Entra , PIM AWS :
Control Tower, SCPs, Security Hub, Guard Duty, IAM Security & Monitoring :
Microsoft Sentinel (KQL), Defender XDR, audit dashboards Documentation & Governance :
Blueprint repositories, risk registers, ITSM/CAB records If this role is of interest please send your cv to review ASAP