DevSecOps Architect (Director level)

In this senior role, you will define and drive the target-state architecture for software delivery, focusing on secure, automated, and efficient CI/CD pipelines. You will lead a transformational program to standardise engineering toolchains, accelerate test automation, and embed security into every release. You’ll shape architecture for AI-assisted software engineering and governance of production AI/ML systems, partnering with cross-functional teams to raise quality and velocity. This is a strategic, enterprise-scale opportunity to influence how engineering and security operate at pace within a regulated environment.

• Define the target-state CI/CD and DevSecOps architecture across build, deployment, and release processes
• Converge fragmented toolchains onto a common platform and modernise legacy pipelines
• Own and implement the test automation strategy across multiple testing layers
• Define test data management, automation coverage, and quality gates aligned with release decisions
• Drive shift-left testing, service virtualisation, and broader automation in complex environments
• Embed automated security controls (SAST, DAST, SCA, container/IaC scanning, secrets management, SBOM) into pipelines
• Establish policy-as-code, software supply chain security, and automated compliance evidence
• Define architecture and guardrails for AI-assisted software engineering and automated code review
• Oversee lifecycle governance for production AI/ML and LLM systems, including evaluation, deployment, monitoring, governance and rollback
• Experience in modernising complex engineering estates and driving adoption of common standards
• Influence engineering direction across multiple technology teams through senior stakeholder management

• Significant enterprise-scale CI/CD, DevSecOps, and engineering platform architecture experience in a regulated environment
• Proven delivery of a test automation strategy that improved software quality, release frequency, or defect rates
• Strong software engineering background with credibility across development, architecture, and platform teams
• Deep knowledge of modern testing tools (Selenium, Playwright, Cypress, JUnit/pytest, Pact, JMeter or k6)
• Extensive experience integrating security into CI/CD (SAST/DAST/SCA, secrets management, software supply chain security)
• Hands-on experience with Azure DevOps, GitHub Actions, GitLab, or Jenkins, plus Kubernetes, containers, and Terraform
• Experience modernising legacy estates and adopting common standards
• Hands-on exposure to AI/ML, LLM systems, or AI-assisted engineering is highly relevant
• Strong senior stakeholder management to influence direction across tech teams

• Stakeholder influence
• Strategic thinking
• Cross-functional collaboration
• CI/CD architecture
• DevSecOps
• Test automation