DevSecOps & Governance Architect

Location: Holcot

Dev Sec Ops  & Governance
- Outside IR35 - rate negotiable - remote UK
- Start date mid October
- Must have active SC clearance An opportunity has arisen for an experienced Dev Sec Ops  & Governance Architect to play a key role in shaping secure engineering and platform architecture within a complex, security-conscious enterprise environment. The successful individual will sit at the intersection of Dev Sec Ops , platform engineering, cyber security and enterprise architecture, defining how modern engineering platforms can operate securely at scale without unnecessarily restricting developer productivity.

This is not simply a security governance position. The role requires someone who understands the engineering behind modern software delivery and can translate security policies and risk requirements into practical, automated and reusable technical patterns. They will help define target and transitional architectures, assess technology and vendor options, establish appropriate platform guardrails and create reference architectures that can be adopted across multiple domains.

Key Responsibilities Define target and transitional architectures for enterprise Dev Sec Ops  and engineering platforms. Design secure software supply-chain approaches covering SCA, vulnerability scanning, secrets detection, licence controls, SBOMs, signing and provenance. Establish architectural patterns across CI/CD, artefact repositories, containerised environments and runtime provisioning. Design appropriate identity, SSO, RBAC, logging and auditing controls. Introduce policy-as-code and automated security enforcement into engineering workflows.

Assess vendor platforms, tooling and deployment options against architectural and security requirements. Define approved, controlled and unsupported technology usage patterns. Design governance models covering exceptions, risk acceptance and security decision-making. Ensure platform designs align with wider enterprise architecture and security obligations. Develop reusable reference architectures and patterns that can scale across teams and domains. Facilitate architecture workshops and support technical decision-making across engineering, security and business stakeholders.

Essential Skills & Experience Enterprise Dev Sec Ops  architecture and/or platform architecture. Secure software supply chains and modern software-delivery practices. CI/CD architecture and engineering tooling. SCA, vulnerability management/scanning and secrets detection. SBOMs, software signing and provenance. Artefact repositories and container platforms. Identity, SSO and RBAC. Logging, auditability and security-control design. Policy-as-code and automated security enforcement. Enterprise architecture and security governance.

Translating cyber/security policies into practical engineering controls. Architecture workshops, technical decision-making and stakeholder engagement. Balancing strong security controls with developer experience and productivity. Working across security, architecture, engineering and delivery functions.