Senior DevSecOps Engineer - Outside IR35

London
2 weeks ago
Create job alert

Outside IR35, DevSecOps Engineer, Azure, AWS, Best practice, Regulatory Environment background, Mobile Application, Web Application, Greenfield Build, London + West Midlands.

We are seeking a Senior DevSecOps Engineer to lead governance, architecture guidance, and assurance for Greenfield Web Application build across infrastructure security, Microsoft Azure, AWS, Kubernetes and key SaaS platforms. This role is pivotal in shaping technical blueprints, setting security standards, and ensuring regulatory compliance with Cyber Essentials Plus, ISO 27001, and Zero Trust principles.

You will act as the glue between IT and platform teams to embed best practices, validate implementations, and support audit readiness across IaaS, PaaS, and SaaS environments.

Key Responsibilities

Define and maintain multi-cloud security standards and reference blueprints (e.g. Azure Policy/Initiatives, AWS Control Tower/SCPs)
Own security architecture patterns and contribute to HLD/LLD, threat models, and risk assessments
Set assurance criteria and control evidence requirements for internal teams and third-party vendors
Establish policy-as-code requirements and maintain an exceptions register with expiry and risk ownership
Define identity and access control standards (Entra ID Conditional Access, MFA, PIM; AWS IAM federation)
Govern SaaS security onboarding (SSO, OAuth governance, DLP controls, vendor assessments)
Strong regulatory sector experience
Educate and influence teams through guidance, clinics, and coaching sessions
Familiarity with IaaS, PaaS, SaaS risk models and audit frameworks
Excellent written communication and facilitation skills to drive adoption and influence stakeholdersAdditional Skills

Certifications: AZ‑500, SC‑100, SC‑200, AZ‑700, AWS Security Specialty, CISSP (or equivalents)
Experience with blueprint catalogues and architecture governance processes
Working knowledge of containers/Kubernetes (AKS/EKS) policy modelsWhile this role focuses on governance and assurance, hands-on use may be required for validation:

Azure: Policy/Initiatives, Defender for Cloud, Entra ID, PIM
AWS: Control Tower, SCPs, Security Hub, GuardDuty, IAM
Security & Monitoring: Microsoft Sentinel (KQL), Defender XDR, audit dashboards
Documentation & Governance: Blueprint repositories, risk registers, ITSM/CAB recordsIf this role is of interest please send your cv to review ASAP

Related Jobs

View all jobs

Senior DevSecops Engineer - Outside IR35

Senior Security Engineer

Senior Network Engineer

Identity and Access Management Analyst

Senior IT Information Security Officer

Senior User Researcher, Hybrid, £650 pd Inside

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

What Hiring Managers Look for First in Cyber Security Job Applications (UK Guide)

If you want to stand out in the highly competitive world of cyber security job applications, you need to understand what hiring managers look for before they even finish reading a CV. Cyber security hiring managers scan applications quickly and with specific priorities in mind. They assess not just your technical ability, but your judgement, professionalism, clarity, risk awareness and evidence of impact. This guide explains what hiring managers look for first in cyber security applications across roles like Security Analyst, Security Engineer, Penetration Tester, Incident Responder, Security Architect, Governance Risk and Compliance specialists and Cloud Security positions. Use this as a practical, step-by-step checklist to sharpen your CV, LinkedIn profile, cover letter and portfolio before you apply on www.cybersecurityjobs.tech .

The Skills Gap in Cyber Security Jobs: What Universities Aren’t Teaching

Cyber security has become one of the most critical disciplines in the modern economy. From protecting financial systems and healthcare data to securing national infrastructure, cloud platforms and supply chains, cyber security professionals now sit at the frontline of digital trust. Demand for cyber security talent in the UK has surged. Job vacancies remain high, salaries continue to rise, and organisations across every sector report difficulty hiring skilled professionals. Yet despite this demand, many graduates struggle to break into cyber security roles and employers consistently report that candidates are not job-ready. The problem is not intelligence, ambition or academic effort. It is a persistent and widening skills gap between university education and real-world cyber security work. This article explores that gap in depth: what universities teach well, what they routinely miss, why the gap exists, what employers actually want, and how jobseekers can bridge the divide to build sustainable careers in cyber security.

Cyber Security Jobs for Career Switchers in Their 30s, 40s & 50s (UK Reality Check)

If you’re thinking about switching into cyber security in your 30s, 40s or 50s, you’re in good company. Across the UK, organisations of all sizes are hiring people from diverse backgrounds to protect systems, data & customers. But with hype around “hackers” & quick-win courses, it’s hard to separate reality from fiction. This guide gives you a UK reality check: which roles genuinely exist, what employers actually want, how training really works, what to expect on salary & progression & whether age matters. Whether you come from finance, project management, operations, law, HR or customer service, there is a credible route into cyber security if you approach it strategically.