ai engineer

senior software engineer

analytics engineer

platform engineer

senior platform engineer

principal cloud architect

UK Government - Department for Science, Innovation & Technology

<div><div><h2 class="jobSectionHeader"><b>Details</b></h2>
<div><h3 class="jobSectionHeader"><b>Reference number</b></h3>
<div>468917
</div></div><div><h3 class="jobSectionHeader"><b>Salary</b></h3><div>
&pound;69,675 - &pound;90,756</div></div><div><div>
Salary is paid within the grade range shown below.
<br>
As this is a GDAD role, the maximum salary includes a non-pensionable technical allowance, and successful candidates will be appointed somewhere within that range depending on assessment.
<br>
<br>
Grade 6
<br>
National: &pound;69,675 to &pound;82,318 (maximum includes &pound;12,643 non-pensionable allowance)
<br>
London: &pound;74,605 to &pound;90,756 (maximum includes &pound;16,151 non-pensionable allowance)</div></div><div><div>
A Civil Service Pension with an employer contribution of 28.97%</div></div>
<div>GBP</div>
<div><h3 class="jobSectionHeader"><b>Job grade</b></h3><div><div>
Grade 6</div></div></div><div><h3 class="jobSectionHeader"><b>
Contract type</b></h3><div>
Permanent</div></div><div><h3 class="jobSectionHeader"><b>
Business area</b></h3><div>
DSIT - Digital, Technologies and Telecoms</div></div><div><h3 class="jobSectionHeader"><b>
Type of role</b></h3><div>
Other</div></div><div><h3 class="jobSectionHeader"><b>
Working pattern</b></h3><div>
Flexible working, Full-time, Job share, Part-time</div></div><div><h3 class="jobSectionHeader"><b>
Number of jobs available</b></h3><div>
2</div></div></div>
<div><div><h2 class="jobSectionHeader"><b>Contents</b></h2></div><div><ul><li>
Location</li><li>
About the job</li><li>
Benefits</li><li>
Things you need to know</li><li>
Apply and further information</li></ul></div><div><h2 class="jobSectionHeader"><b>
Location</b></h2></div><div><div>
Bristol, London, Manchester</div></div><div><h2 class="jobSectionHeader"><b>
About the job</b></h2></div><div><h3 class="jobSectionHeader"><b>
Job summary</b></h3><div><h2 class="jobSectionHeader"><b>
Incubator for AI, i.AI</b></h2><h3 class="jobSectionHeader"><b>
Help build the platform behind some of the most ambitious AI products in government</b></h3><p>
This is not a conventional platform engineering role.</p><p>
At i.AI, you will help build the cloud platform that enables teams to deliver frontier AI products into real world public services. Your work will shape the foundations that allow AI systems to move from idea to production securely, reliably and at pace.</p><p>
You will join a highly capable engineering team with a flat structure, strong technical standards and a high degree of autonomy. This is an environment for engineers who want to solve hard problems, influence architecture, improve how teams build, and work on technology that has visible impact beyond the organisation itself.</p><p>
If you are excited by platform engineering, modern cloud infrastructure, AI enabled systems and the challenge of making advanced technology work in the real world, this is a rare opportunity to do all of that in one role.</p></div></div><div><h3 class="jobSectionHeader"><b>
Job description</b></h3><div><h2 class="jobSectionHeader"><b>
About the role</b></h2><p>
We are looking for a Lead Cloud Platform Engineer to help design, build and operate the platform that powers AI product delivery.</p><p>
This is a hands-on technical leadership role for an engineer who combines deep cloud platform expertise with broad strength across architecture, security, software engineering and AI platform concerns. You will operate as a T shaped engineer, bringing both technical depth and the judgement to work across disciplines when needed.</p><p>
You will play a central role in defining how platform capabilities are built, adopted and evolved. You will lead through technical credibility, not hierarchy, helping teams solve complex problems while raising the bar for engineering quality across the platform.</p><h2 class="jobSectionHeader"><b>
What you will work on</b></h2><ul><li><b>
End to end platform engineering: </b>You will own the technical delivery of platform initiatives from concept through to production. That means taking ambiguous problems, making clear architectural decisions, and building secure, scalable cloud components that teams can depend on.</li><li><b>
Platform as a product: </b>You will work backwards from user needs to build technical capabilities that improve the developer experience. You will create reusable patterns for local development, pipelines, environments, observability and operational ergonomics, helping teams ship faster with less friction.</li><li><b>
AI workload enablement: </b>You will support the delivery of production AI systems and agentic workloads. You will build and maintain platform capabilities for model access, routing, tracing, evaluation, reliability and cost control.</li><li><b>
Intelligent automation and security: </b>You will treat security as a first class engineering concern, building automated controls for software supply chain security, secrets management and policy as code. You will also actively use GenAI capabilities to reduce operational toil, introduce intelligent guardrails and streamline developer workflows.</li><li><b>
Technical leadership: </b>You will help shape platform direction through strong engineering judgement and hands on delivery. You will mentor other engineers, introduce better patterns and balance the needs of individual teams with platform wide coherence.<br>
</li></ul><h2 class="jobSectionHeader"><b>
Why join i.AI</b></h2><p>
This is a chance to work on platform engineering at a point where cloud, software delivery and AI are converging fast.</p><p>
You will have the opportunity to:</p><ul><li>
Build for real production AI use cases rather than isolated experiments</li><li>
Work with frontier models and modern AI tooling as part of day to day engineering</li><li>
Solve platform problems that span reliability, developer experience, security and AI enablement</li><li>
Influence architecture and technical standards in a high trust, high agency team</li><li>
Contribute to products with meaningful real world impact</li></ul><p>
For the right engineer, this role offers a combination that is hard to find elsewhere: complex platform work, genuine technical ownership, access to advanced AI tooling, and the chance to help shape how ambitious AI products are delivered in practice.</p><h2 class="jobSectionHeader"><b>
Our stack</b></h2><p>
You do not need to be an expert in every tool from day one, but our technical ecosystem includes:</p><ul><li><b>
Cloud infrastructure: </b>AWS including ECS, Lambda, CloudFront, RDS and S3, alongside multi cloud integration patterns across Azure and GCP.</li><li><b>
Containerisation and delivery: Docker and podman, container orchestration, GitHub Actions for CI and CD, infrastructure automation, and robust deployment patterns including rolling, canary and blue green.</b></li><li><b>
Development: </b>Terraform, Python with FastAPI, and JavaScript or TypeScript with Next.js, Astro and Node.js.AI platform layer: Tooling for model routing, tracing and evaluation, such as LiteLLM and Langfuse, integrated with modern AI frameworks including LangGraph, DSPy and Inspect.</li><li><b>
AI harness: </b>OpenCode and Claude Code, with full access to frontier models from OpenAI, Anthropic and Google for both developer augmentation and platform integration.</li><li><b>
Observability: </b>AWS CloudWatch for logs, metrics and alarms, alongside Grafana, Sentry and X Ray for monitoring and tracing.</li><li><b>
Security: </b>Supply chain tooling including SAST, SCA and SBOMs, policy as code, runtime assurance including CSPM and DAST, and automated IAM and secrets management.</li></ul></div></div><div><h3 class="jobSectionHeader"><b>
Person specification</b></h3><div><h2 class="jobSectionHeader"><b>
Who we think will thrive in this role</b></h2><p>
We are looking for an experienced lead level engineer who is energised by building platforms that matter.</p><p>
You may be a strong fit if you bring some of the following:</p><ul><li>
Strong hands on experience building and operating cloud platforms in production, with AWS strongly preferred</li><li>
Deep understanding of platform architecture, distributed systems design, networking fundamentals and reliability concepts such as SLOs, tracing and alerting</li><li>
A mindset for applying AI internally, with experience or strong interest in using GenAI and LLM assisted tooling to reduce repetitive operational work and improve platform resilience</li><li>
Practical experience embedding security into delivery workflows, including software supply chain security, IAM, threat modelling and policy as code</li><li>
Experience supporting AI or ML systems in production, including model serving, MLOps, agentic orchestration, or prompt and inference cost trade offs</li><li>
Practical proficiency in software development and strong capability in infrastructure automation</li><li>
A track record of defining reusable patterns and evolving engineering standards, rather than simply delivering one off solutions</li><li>
Strong ownership, sound judgement and comfort working through ambiguity</li><li>
A product mindset, with a clear understanding that developer experience is critical to platform adoption</li><li>
The ability to coach others, raise technical standards through practice, and operate effectively in a flat, high agency team</li></ul><p>
Bonus experience includes multi cloud patterns, GPU or HPC workloads, or building platform telemetry and internal tools.</p></div></div><div><h3 class="jobSectionHeader"><b>
Technical skills</b></h3>
<div><p>We'll assess you against these technical skills during the selection process:</p>
<ul><li>Candidates will assessed technically via interview and potentially take home assessment. Details of this will be communicated to the candidate directly.</li>
</ul></div></div><div><h2 class="jobSectionHeader"><b>Benefits</b></h2></div><div><div>
Alongside your salary of &pound;69,675, Department for Science, Innovation &amp; Technology contributes &pound;20,184 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides .</div></div><div><div><p>
The Department for Science, Innovation and Technology offers a competitive mix of benefits including:</p><ul><li>
A culture of flexible working, such as job sharing, homeworking and compressed hours.</li><li>
Automatic enrolment into the Civil Service Pension Scheme, with an employer contribution of 28.97%.</li><li>
A minimum of 25 days of paid annual leave, increasing by 1 day per year up to a maximum of 30.</li><li>
An extensive range of learning &amp; professional development opportunities, which all staff are actively encouraged to pursue.</li><li>
Access to a range of retail, travel and lifestyle employee discounts.</li></ul><p><b>
Office attendance</b></p><p>
The Department operates a discretionary hybrid working policy, which provides for a combination of working hours from your place of work and from your home in the UK. The current expectation for staff is to attend the office or non-home based location for 40-60% of the time over the accounting period.</p></div></div><div><h2 class="jobSectionHeader"><b>
Things you need to know</b></h2></div><div><h3 class="jobSectionHeader"><b>
Artificial intelligence</b></h3><div>
Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance for more information on appropriate and inappropriate use.</div></div><div><h3 class="jobSectionHeader"><b>
Selection process details</b></h3><div><div>
This vacancy is using Success Profiles , and will assess your Experience and Technical skills.</div></div><div><div><p><b>
Appointment is conditional on successfully completing UK Government SC clearance. Prior clearance is not requiredwe will sponsor and support you.</b> You should normally have been resident in the UK for 2 of the past 5 years. Employment is conditional on obtaining and maintaining the required clearance(s). More detail on clearance eligibility can be found on the UK Government website: National security vetting: clearance levels - GOV.UK</p><p>
In accordance with the Civil Service Commission rules, the following list contains all elements of the selection process.</p><p>
Candidates should expect to go through some or all of the following stages once an application has been submitted:</p><ul><li>
A short initial conversation</li><li>
Technical take home test</li><li>
Second interview in which well review the technical test</li><li>
Third interview with wider representation from the team</li><li>
Final interview with members of the senior team</li></ul><p>
To apply please follow the instructions on Greenhouse where you will be asked to complete personal statement questions and upload your CV. Should the team receive an abundance of CVs we reserve the right to sift on CV alone.</p><h3 class="jobSectionHeader"><b>
Diversity and Inclusion</b></h3><div>
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan and the Civil Service Diversity and Inclusion Strategy . As part of the application process, we monitor statistics on D&amp;I. You can see how we process this data here: Recruitment privacy notice - GOV.UK.</div><br>
Feedback will only be provided if you attend an interview or assessment.</div></div></div><div><h3 class="jobSectionHeader"><b>
Security</b></h3><div><div>
Successful candidates must undergo a criminal record check.</div></div><div><div>
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check .<br>
<br>
See our vetting charter .</div></div><div><div>
People working with government assets must complete baseline personnel security standard (opens in new window) checks.</div></div></div><div><h3 class="jobSectionHeader"><b>
Nationality requirements</b></h3><div><div>
<p>This job is broadly open to the following groups:</p>
<ul><li>UK nationals</li>
<li>nationals of the Republic of Ireland</li>
<li>nationals of Commonwealth countries who have the right to work in the UK</li>
<li>nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS)</li>
<li>nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)</li>
<li>individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020</li>
<li>Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service</li>
</ul>Further information on nationality requirements
</div></div></div><div><h3 class="jobSectionHeader"><b>Working for the Civil Service</b></h3><div><div>
The Civil Service Code sets out the standards of behaviour expected of civil servants.<br>
<br>
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles .</div></div><div><div>
The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.</div></div><div><div>
The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.</div></div></div><div><h3 class="jobSectionHeader"><b>
Diversity and Inclusion</b></h3><div>
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan and the Civil Service Diversity and Inclusion Strategy .</div></div><div><h2 class="jobSectionHeader"><b>
Apply and further information</b></h2></div><div><div>
This vacancy is part of the Great Place to Work for Veterans initiative.</div></div><div><div>
Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.</div></div><div><h3 class="jobSectionHeader"><b>
Contact point for applicants</b></h3><div><h4 class="jobSectionHeader"><b>
Job contact :
</b></h4><ul><li>Name : Ben Sams</li><li>
Email : ben.sams@dsit.gov.uk</li></ul><h4 class="jobSectionHeader"><b>
Recruitment team</b></h4><ul><li>
Email : ben.sams@dsit.gov.uk</li></ul></div></div><div><h3 class="jobSectionHeader"><b>
Further information</b></h3><div><div>
Appointment to the Civil Service is governed by the Civil Service Commissions Recruitment Principles. If you feel that your application has not been treated in accordance with the recruitment principles, and wish to make a complaint, then you should contact in the first instance dsitresourcing.GRS@cabinetoffice.gov.uk. If you are not satisfied with the response that you receive, then you can contact the Civil Service Commission. For further information on bringing a complaint to the Civil Service Commission please visit their web pages at: https://civilservicecommission.independent.gov.uk/contact-us/</div></div></div></div></div><div></div>

Lead Cloud Platform Engineer- i.AI

<div><div><div><p><b>Entity:
</b></p>Technology<p><b><br>
Job Family Group:
</b></p>IT&amp;S Group<p><b><br>
Job Description:
</b></p><p>The Principal Platform Engineer is a senior individual contributor role responsible for defining the strategy and architecture for how bp's portfolio of engineering and data platforms connect, converge, and serve the organisation. This role sits at the intersection of platform engineering and enterprise architecture, providing technical leadership and strategic direction without direct line management.</p><p></p><p>
The role exists to bring coherence to a distributed platform landscape, ensuring that internal engineering platforms, cloud-native infrastructure, and enterprise software-as-a-service (SaaS) solutions are integrated in a consistent, scalable, and well-governed manner. The Principal Platform Engineer is the technical authority on platform integration and convergence, influencing design decisions across teams and functions.</p><p></p><p><b>
Key Accountabilities</b></p><ul><li>
Define and maintain a platform convergence strategy that articulates the current-state landscape, the target architecture, and a credible transition path &mdash; enabling bp's engineering platforms and SaaS solutions to operate as an integrated whole.</li><li>
Lead architectural design and decision-making at the intersection of internal platforms and enterprise SaaS, establishing integration patterns, data contracts, and governance standards that apply consistently across the platform estate.</li><li>
Act as the principal technical authority for platform engineering across the digital delivery organisation, providing expert guidance on platform design, cloud-native patterns, and systems integration to engineering teams and senior stakeholders.</li><li>
Drive resolution of complex cross-platform integration challenges, including identity, data flow, event-driven architecture, and API design &mdash; ensuring that integration decisions are durable, secure, and aligned with enterprise standards.</li><li>
Produce and maintain high-quality architecture strategy documents, reference architectures, and decision records that are accessible to both engineering and executive audiences, building shared understanding of the platform direction.</li><li>
Collaborate with AI engineering, software engineering, and external vendor and partner teams to ensure that platform architecture decisions enable and do not constrain the delivery of business and AI-powered capabilities.</li></ul><p></p><p>
This is a role with organisation-wide technical influence. The successful candidate will work closely with engineering managers, delivery teams, and external partners across a complex, multi-platform environment. The role requires a balance of critical thinking and hands-on technical credibility &mdash; candidates should be comfortable both authoring architecture strategy documents and engaging deeply in technical design discussions.</p><p></p><h1 class="jobSectionHeader"><b>
What you will bring...</b></h1><ul><li>
Extensive experience in platform engineering (including Kubernetes) and the design, delivery, and operation of large-scale, multi-component platform estates in a cloud-native environment.</li><li>
Proven enterprise architecture capability, including experience producing target-state architecture strategies and navigating complex system landscapes spanning internal platforms and third-party SaaS.</li><li>
Deep knowledge of cloud-native architecture patterns: containerisation and orchestration, service mesh, API gateway design, event streaming, and infrastructure-as-code.</li><li>
Demonstrable experience integrating enterprise SaaS solutions &mdash; including ERP or business application platforms &mdash; with internally developed systems, covering API, identity, and data integration patterns.</li><li>
Track record of operating as a senior technical authority in a large organisation, influencing architecture and engineering decisions at scale without direct management responsibility.</li><li>
Strong communication and documentation skills, with the ability to convey complex architectural concepts clearly to technical peers, delivery teams, and senior business stakeholders.</li><li>
Bachelor's degree or higher in Computer Science, Software Engineering, Systems Engineering, or a related technical subject area or equivalent experience.</li><li>
Familiarity with regulatory and compliance considerations (e.g., data residency, audit logging, access control) as they apply to enterprise platform design.</li></ul><p></p><p><b>
Desirable Criteria</b></p><ul><li>
Familiarity with enterprise data platform architectures, including data mesh, data fabric, or data lakehouse patterns, and how these intersect with application and integration platforms.</li><li>
Prior experience working at the boundary of AI/ML infrastructure and broader platform engineering, including understanding of how MLOps capabilities are hosted and operated within an enterprise platform.</li><li>
Experience engaging with external software vendors and system integrators on integration architecture and platform alignment.</li><li>
Relevant professional certifications in cloud architecture or enterprise architecture (e.g., AWS Solutions Architect Professional, Azure Solutions Architect) are advantageous.</li></ul><p></p><h1 class="jobSectionHeader"><b>
Why join us?</b></h1><p></p><p>
We&rsquo;re committed to supporting leaders who want to make an impact. At bp, you&rsquo;ll have the chance to shape and influence outcomes across businesses. You&rsquo;ll be part of an inclusive environment where diverse perspectives are valued, and where your contribution to performance and integration matters. We invest in the growth and wellbeing of our people, providing the resources, networks, and development opportunities needed to thrive.</p><p></p><p>
Our total rewards package includes competitive pay, bonuses, share options, and a range of flexible benefits designed to meet your needs &mdash; from healthcare and retirement plans to paid time off and agile working. We recognise that people have multifaceted lives, and we strive to offer a career experience that reflects that.</p><p></p><p><b>
Apply now!</b></p><p></p><p><b>
Location</b></p><p>
Please note that while this position can be based in our Sunbury office, this will move to Southwark, London by end 2027.</p><p><b><br>
Travel Requirement</b></p>
Negligible travel should be expected with this role<p><b><br>
Relocation Assistance:</b></p>
This role is not eligible for relocation<p><b><br>
Remote Type:</b></p>
This position is a hybrid of office/remote working<p><b><br>
Skills:</b></p>
Agility core practices, Agility core practices, API and platform design, Cloud Platforms, Collaboration, Communication, Configuration management and release, Continuous deployment and release, Creating a high performing team, Database Design, Digital Project Management, Documentation and knowledge sharing, Emerging technology monitoring, Facilitation, Information Security, Mentoring, Metrics definition and instrumentation, NoSql data modelling, Problem Solving, Relational Data Modelling, Risk Management, Scripting, Secure development, Service operations and resiliency, Software Design and Development {+ 7 more}<p><b><br>
Legal Disclaimer:</b></p><p></p><p>
We are an equal opportunity employer. We do not discriminate on the basis of protected characteristics like race, religion, color, sex, national origin, sexual orientation, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp&rsquo;s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.<br>
<br>
If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.</p></div>
<div><p><b>Legal Disclaimer:</b></p>
<p>
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp&rsquo;s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.</p>
<p>
If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.</p></div>
</div><div>Expand job description</div></div>
<br><div><div><p>Disclaimer</p><br>
<p></p>
<p>
This is a high-level summary only of terms and current discretionary benefits applicable to certain roles. Some rewards, benefits and policies are at managers&rsquo; discretion and vary depending on where you work within the business. All terms subject to contract and all discretionary benefits subject to policy and eligibility.</p></div></div>

Principal Platform Engineer

Mastercard

<div><p><b>Our Purpose</b></p><p></p><p><i>
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we&rsquo;re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.</i></p><p></p><p><b>
Title and Summary</b></p><p></p>
Senior Principal Agentic Platforms Architect<p></p>
Overview
<br>
<br>
The AI Center of Excellence is seeking a Senior Principal Agentic Platforms Architect to lead the technical vision, architecture, and hands-on development of Mastercard's enterprise agentic AI platforms. This role demands deep, demonstrated expertise in building and shipping production-grade AI and agentic systems at enterprise scale, combined with the architectural rigor required to operate within one of the most highly regulated and security-conscious environments in the world. Reporting to senior leadership, you will own the E2E platform architecture for agentic AI systems, from runtime orchestration and governance infrastructure through to production deployment and operational lifecycle management. This is not a strategy-only role. You will write code, review code, and hold the team to the highest standards of engineering excellence. The right candidate has spent their career building AI systems that run in production, not prototypes, not proofs of concept, but systems that operate at scale, under load, and under scrutiny<br>
<br>
Role
<br>
<br>
<ul><li>Serve as the principal technical authority for agentic AI platform architecture, owning the design and evolution of runtime environments, governance layers, orchestration engines, and multi-tenancy infrastructure that support enterprise-grade AI agent deployment</li></ul><br>
<ul><li>Lead hands-on architecture and development of agentic systems, including agent orchestration frameworks, tool and model integration layers, policy enforcement engines, guardrail systems, behavioral monitoring pipelines, and evaluation infrastructure</li></ul><br>
<ul><li>Design and implement scalable, resilient platform architectures that support multi-agent coordination, A2A communication protocols, memory governance, and real-time observability across distributed deployments</li></ul><br>
<ul><li>Drive the technical strategy for model integration and abstraction, enabling model-agnostic agent execution across multiple providers while enforcing cost optimization, routing intelligence, and governance controls at the platform level</li></ul><br>
<ul><li>Architect and build API-first platform interfaces that enable both internal teams and external consumers to build, deploy, govern, and operate AI agents through programmatic, language-agnostic access patterns</li></ul><br>
<ul><li>Define and enforce engineering standards, code quality practices, and architectural governance across the platform engineering team, ensuring every component meets production-grade requirements for security, resilience, performance, and compliance</li></ul><br>
<ul><li>Provide deep technical leadership on agentic AI design patterns, including retrieval-augmented generation, tool calling via Model Context Protocol, multi-step orchestration, human-in-loop workflows, and autonomous decision-making architectures</li></ul><br>
<ul><li>Act as a trusted technical advisor to senior leadership, translating complex platform architecture decisions into clear, business-oriented language that supports informed decision-making at the executive level</li></ul><br>
<ul><li>Mentor and develop a high-performing engineering team, fostering a culture of technical excellence, intellectual honesty, rigorous code review, and continuous improvement</li></ul><br>
<ul><li>Produce and maintain authoritative architectural documentation, including system design documents, architecture decision records, and integration specifications that meet Mastercard's engineering principles and security standards</li></ul><br>
All About You
<br>
<br>
<ul><li>15+ years of hands-on experience in software engineering and AI engineering, with a significant and demonstrable portion spent designing, building, and shipping AI and machine learning systems to production at enterprise scale</li></ul><br>
<ul><li>Proven track record of architecting and delivering agentic AI systems, autonomous agents, multi-agent orchestration platforms, or AI-powered automation systems that operate in production with real users, real data, and real consequences</li></ul><br>
<ul><li>Deep hands-on coding proficiency. You write production code, you review production code, and you hold others to the same standard. This is a building role, not a diagram-drawing role</li></ul><br>
<ul><li>Advanced expertise in Python and modern AI/ML frameworks, with hands-on experience across agentic toolkits such as LangChain, LangGraph, CrewAI, or equivalent orchestration frameworks</li></ul><br>
<ul><li>Strong architectural experience with cloud-native platforms including AWS, Databricks, and Kubernetes, with demonstrated ability to design for high availability, fault tolerance, and horizontal scalability</li></ul><br>
<ul><li>Deep understanding of AI governance, trust, and safety architectures, including guardrail systems, policy engines, behavioral analytics, evaluation frameworks, red teaming methodologies, and compliance mapping</li></ul><br>
<ul><li>Experience designing and building multi-tenant platforms with fine-grained access control, workspace isolation, and enterprise-grade identity and authorization systems</li></ul><br>
<ul><li>Proven ability to design API-first architectures, RESTful interfaces, and SDK abstractions that serve both internal platform teams and external consumers</li></ul><br>
<ul><li>Strong understanding of data architectures including Delta Lake, data lakehouse patterns, vector databases and retrieval-augmented generation pipelines</li></ul><br>
<ul><li>Demonstrated experience with tool calling architectures and model-agnostic integration patterns across multiple LLM providers</li></ul><br>
<ul><li>Exceptional communicator who can articulate deeply technical architecture decisions to engineering teams and translate complex platform concepts into business language for non-technical stakeholders</li></ul><br>
<ul><li>Known for building trust, holding high standards, and mentoring engineers. You make the people around you better. Motivated by hard problems, not titles. You bring intellectual curiosity, resilience, and relentless energy to complex technical challenges</li></ul><br>
<ul><li>Bachelor's degree in Computer Science, Engineering, or a related field. Advanced degree preferred but not required if the experience speaks for itself</li></ul><p></p><p><b>
Corporate Security Responsibility</b></p><p><br>
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:</p><ul><li><p>
Abide by Mastercard&rsquo;s security policies and practices;</p></li><li><p>
Ensure the confidentiality and integrity of the information being accessed;</p></li><li><p>
Report any suspected information security violation or breach, and</p></li><li><p>
Complete all periodic mandatory security trainings in accordance with Mastercard&rsquo;s guidelines.</p></li></ul></div><p></p>

Senior Principal Agentic Platforms Architect

<div><b>Role description</b><p><b><br>
Infrastructure Solution Architect (cloud architecture,azure iaas,windows server,euc administration)</b></p>
<p><b>
Location: London (Hybrid, 3 days onsite)</b><br>
<b>Employment Type: Permanent / Fixed-Term</b></p><br>
<p></p>
<p>
We are seeking a visionary Infrastructure Solution Architect to lead enterprise-wide technology architecture across a broad spectrum of infrastructure domains. This is a strategic leadership role, acting as a trusted advisor to senior stakeholders and shaping the future of complex infrastructure landscapes.</p>
<p>
You will play a pivotal role in defining and delivering scalable, secure, and innovative solutions that enable business transformation, operational resilience, and long-term growth.</p><br>
<p></p>
<p><b>
Key Responsibilities</b></p>
<ul>
<li>Define and lead the end-to-end infrastructure architecture strategy, ensuring alignment with digital transformation objectives</li>
<li>Design and govern scalable, high-performance, and secure solutions across multiple domains, including:
<ul><li>Wintel &amp; Linux platforms</li>
<li>Cloud (Azure, AWS, Hybrid environments)</li>
<li>Network (LAN, WAN, SD-WAN, Wireless, Firewalls)</li>
<li>Unified Communications (Cisco, Microsoft Teams)</li>
<li>Mobility &amp; Endpoint Management (Intune, UEM/MDM)</li>
<li>Observability &amp; Monitoring (e.g., ELK, Prometheus, AppDynamics)</li>
<li>End-User Computing (VDI, Citrix, M365, OS lifecycle)</li>
<li>Service Desk &amp; End-User Services (ITSM, automation, CSAT, FCR)</li>
</ul></li><li>Act as a trusted advisor to business and IT leaders, translating strategic objectives into future-ready technical solutions</li>
<li>Lead architecture governance, ensuring compliance with enterprise standards and regulatory frameworks</li>
<li>Drive infrastructure transformation initiatives, including cloud adoption, automation, Zero Trust, SASE, and containerization</li>
<li>Evaluate emerging technologies and provide strategic recommendations</li>
<li>Collaborate with engineering, security, DevOps, and delivery teams to ensure cohesive solution design</li>
<li>Develop reference architectures, blueprints, and roadmaps</li>
<li>Support RFP/RFI responses and pre-sales engagements for large-scale programs</li>
<li>Mentor and guide architects and senior engineers, fostering a culture of technical excellence and innovation</li></ul><br>
<p></p>
<p><b>
What We're Looking For</b></p>
<ul>
<li>Extensive experience in IT infrastructure and architecture, with broad exposure across multiple enterprise domains</li>
<li>Strong track record designing and delivering enterprise-scale infrastructure solutions</li>
<li>Deep expertise across cloud and on-premise environments (Azure, AWS, Hybrid)</li>
<li>Strong understanding of ITSM, ITIL, and service management frameworks</li>
<li>Knowledge of security frameworks, regulatory standards, and resilience planning (e.g., ISO, NIST, DR/BCP)</li>
<li>Exceptional stakeholder management, communication, and leadership skills</li></ul><br>
<p></p>
<p><b>
Preferred Certifications</b></p>
<ul>
<li>TOGAF or equivalent Enterprise Architecture certification</li>
<li>ITIL (v3 / v4)</li>
<li>Microsoft, Cisco, VMware, or Red Hat certifications</li>
<li>Cloud certifications (e.g., AWS Solutions Architect, Azure Solutions Architect)</li></ul><br>
<p></p>
<p><b>
Hurry &amp; apply for a more detailed conversation!</b></p>
<p><b>
#UST</b></p><b><br>
Skills</b><p><br>
cloud architecture,azure iaas,windows server,euc administration,azure ad,firewall,cloud security architecure,network design,citrix xenapp,netscaler,cisco aci,network security</p><b><br>
About UST</b><br>
UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world&rsquo;s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients&rsquo; organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact&mdash;touching billions of lives in the process.</div>

Infrastructure Solution Architect_London (Solution Architect II - Cloud Infrastructure Services)

<div><h2 class="jobSectionHeader"><b>Description</b></h2>
<div>
<p>The Principal Microsoft Defender XDR, IRM &amp; Deception Engineer, working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception programme - including honeypots, honeytokens, decoy users, decoy devices, deceptive credentials, and breadcrumbs - fully integrated with Microsoft Defender XDR (Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps), Microsoft Sentinel, and Microsoft Security Copilot.</p>
<p>
The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands-on Defender XDR mastery and the use of Agentic AI to drive proactive, intelligence-led, and largely autonomous security operations.</p>
<p>
The Role:</p>
<ul>
<li>Deception Engineering Leadership<ul>
<li>Own and lead the enterprise cyber deception programme end-to-end, including strategy, architecture, deployment, operations, and continuous improvement.</li>
<li>Design, deploy, and operate a layered deception fabric across on-premises, hybrid, and multi-cloud environments using honeypots, honeytokens, decoy accounts, decoy devices, deceptive files / shares, and breadcrumbs.</li>
<li>Act as the technical authority for deception engineering and Microsoft Defender XDR across the enterprise.</li>
</ul></li><li>Honeypots, Honeytokens, Decoys &amp; Breadcrumbs<ul>
<li>Design and operate the full deception asset lifecycle, ensuring high-fidelity, low-noise detections that are realistic, attacker-grade, and resilient to evasion.</li>
<li>Deploy and manage Microsoft Defender for Identity deceptive accounts, deceptive devices, and honeytoken accounts across Active Directory and Microsoft Entra ID.</li>
<li>Build and maintain a portfolio of deception assets, including:<ul>
<li>Honeypot systems (low-, medium-, and high-interaction) across on-prem, Azure, AWS, GCP, and OCI</li>
<li>Honeytoken credentials, API keys, OAuth tokens, secrets, and SaaS accounts</li>
</ul></li><li>Decoy users, decoy devices, decoy shares, decoy files, and decoy databases<ul>
<li>Plant attacker-grade breadcrumbs across endpoints, identities, and cloud workloads, including:</li>
<li>Saved credentials, browser cookies, RDP and SSH artefacts</li>
<li>LSASS-resident credentials and cached tokens on selected lures</li>
<li>Fake Kerberos service accounts and SPNs to bait Kerberoasting and AS-REP roasting</li>
</ul></li><li>Continuously evolve deception techniques, lure design, and trap placement aligned to current attacker TTPs, red-team findings, and breach intelligence.</li>
<li>Govern the deception programme with clear standards for asset realism, segmentation, monitoring, and safe operation (no production impact).</li>
<li>Validate deception coverage through red-team, purple-team, and breach-and-attack simulation (BAS) exercises.</li>
</ul></li><li>Microsoft Defender XDR Leadership<ul>
<li>Lead the design, implementation, and optimisation of Microsoft Defender XDR across endpoint, identity, email, and cloud-app workloads.</li>
<li>Integrate all deception signals (honeypot, honeytoken, decoy, breadcrumb) into Defender XDR and Microsoft Sentinel as first-class, high-fidelity detections.</li>
<li>Define and enforce a unified detection and response strategy across the Microsoft security stack.</li>
</ul></li><li>Defender for Identity &amp; Identity Deception<ul>
<li>Lead operation and optimisation of Microsoft Defender for Identity (MDI) to detect identity-based attacks, including:<ul>
<li>Credential theft, Kerberoasting, AS-REP roasting, Pass-the-Hash, and Pass-the-Ticket</li>
<li>Lateral movement, reconnaissance, and privilege escalation</li>
<li>Misuse of deceptive / honeytoken accounts as early-warning tripwires</li>
</ul></li><li>Integrate MDI, deception, and Microsoft Entra ID signals into Defender XDR, Microsoft Sentinel, and SOAR workflows for unified investigation and response.</li>
</ul>
</li><li><p>Data Protection, DLP &amp; Insider Risk Management</p>
<ul>
<li>Lead the design and implementation of Microsoft Purview Data Loss Prevention (DLP) policies across endpoints, cloud apps, and collaboration platforms</li>
<li>Define and enforce data protection controls to prevent unauthorised data exfiltration and misuse</li>
<li>Leverage Microsoft Insider Risk Management (IRM) to detect risky user behaviour, including data leaks, policy violations, and insider threats</li>
<li>Correlate DLP, IRM, and identity signals with Microsoft Defender XDR to provide unified incident context</li>
<li>Collaborate with Risk, Compliance, and Legal teams to align DLP and insider risk controls with regulatory and business requirements</li>
<li>Continuously optimise detection use cases combining identity, data, and behavioural analytics</li>
</ul></li><li>Endpoint, Email &amp; Cloud App Detection<ul>
<li>Lead detection engineering across the Defender XDR stack, ensuring deception assets are continuously monitored alongside production telemetry:</li>
<li>Microsoft Defender for Endpoint (MDE) - EDR policies, ASR rules, and decoy-device monitoring</li>
<li>Microsoft Defender for Office 365 (MDO) - anti-phishing, Safe Links, Safe Attachments, and honeytoken inboxes</li>
<li>Optimise automatic attack disruption, automated investigation and response (AIR), and self-healing capabilities to:<ul>
<li>Disrupt in-progress attacks at machine speed, including deception-triggered intrusions</li>
<li>Reduce analyst workload through high-confidence automation</li>
<li>Improve coverage for ransomware, BEC, and identity-based attacks</li>
<li>Ensure consistent telemetry ingestion and detection parity across Windows, macOS, Linux, mobile, and deception assets.</li>
</ul></li></ul></li><li>Multi-Cloud Deception &amp; Detection (AWS, GCP, OCI)<ul>
<li>Extend the deception programme and Defender-style detection capabilities consistently across AWS, GCP, and OCI, including:</li>
<li>Cloud honeypots, decoy IAM roles, and honeytoken cloud credentials / API keys</li>
<li>Control-plane, workload, container, and Kubernetes threat detection</li>
<li>Cross-cloud identity and access misuse detection</li>
<li>Ensure consistent detection, deception, and response coverage across hybrid and multi-cloud environments.</li>
</ul></li><li>Automation, Agentic AI &amp; Continuous Improvement<ul>
<li>Drive automation of deception deployment, detection, investigation, and response workflows using Microsoft Sentinel SOAR, Logic Apps, and Microsoft Security Copilot.</li>
<li>Define KPIs and metrics covering deception engagement, detection coverage, and response maturity.</li>
<li>Continuously improve detection, hunting, and deception capabilities to align with emerging threats and adversary tradecraft.</li>
</ul></li><li>Stakeholder Engagement &amp; Technical Leadership<ul>
<li>Lead and grow a team of Defender XDR and Deception Engineers, setting technical direction, standards, and delivery priorities.</li>
<li>Partner with SOC, CTI, Identity, Cloud, and Engineering teams to embed deception and Defender XDR detection into all enterprise platforms.</li>
<li>Provide mentorship and leadership to deception engineers, detection engineers, threat hunters, and SOC analysts.</li>
<li>Communicate deception strategy, detection coverage, residual risk, and security improvements to senior stakeholders.</li></ul></li></ul><br>
<p></p>
<p>
</p></div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
<div>
<p><b>What you'll bring:</b></p>
<p><b>
Required Skills &amp; Experience:</b></p>
<ul>
<li>Proven experience designing and operating enterprise cyber deception programmes (honeypots, honeytokens, decoy users, decoy devices, breadcrumbs) at scale.</li>
<li>Extensive hands-on experience operating and engineering Microsoft Defender XDR (MDE, MDI, MDO, MDA) in large enterprises.</li>
<li>Deep expertise across the Microsoft security stack, including:<ul>
<li>Microsoft Defender for Identity (MDI) deceptive accounts, deceptive devices, and honeytokens</li>
<li>Microsoft Sentinel (analytics rules, workbooks, hunting, SOAR)</li>
<li>Microsoft Security Copilot, automated investigation &amp; response, and attack disruption</li>
<li>Microsoft Defender for Cloud Apps and Defender for Cloud</li>
</ul></li><li>Hands-on experience with:<ul>
<li>Open-source and commercial deception / honeypot platforms (e.g., Thinkst Canary, T-Pot, Cowrie, OpenCanary, Zscaler Deception)</li>
<li>Advanced KQL for detection engineering and threat hunting at scale</li>
<li>Detection-as-code, CI/CD of detection content, and security content management</li>
</ul></li><li>Strong knowledge of adversary tradecraft and frameworks:<ul>
<li>MITRE ATT&amp;CK, MITRE Engage, MITRE D3FEND, and the cyber kill chain</li>
<li>Experience leveraging Agentic AI, Microsoft Security Copilot, or AI/ML in security operations (detection, hunting, IR, automation).</li>
</ul></li><li>Proven experience leading incident response across identity, endpoint, email, and cloud domains.</li>
<li>Strong scripting / automation experience (PowerShell, Python, or equivalent).</li>
<li>Deep understanding of Zero Trust architecture and identity-centric defence.</li></ul><br>
<p></p>
<p><b>
Preferred Qualifications:</b></p>
<ul>
<li>Experience contributing to red-team / purple-team exercises and breach-and-attack simulation (BAS) programmes.</li>
<li>Microsoft certifications:<ul>
<li>Microsoft Certified: Security Operations Analyst Associate (SC-200)</li>
<li>Microsoft Certified: Azure Security Engineer Associate (AZ-500)</li>
<li>Microsoft Certified: Cybersecurity Architect Expert (SC-100)</li>
<li>Industry certifications (CISSP, GCIA, GCFA, GCIH, OSCP, or equivalent)</li>
<li>Cloud certifications across AWS, GCP, or OCI</li></ul></li><br>
</ul>
<p></p><p><b>What we offer:</b></p>
<p>
Enjoy a benefits package designed to help you thrive, both professionally and personally. You'll receive 25 days of annual leave plus an extra WTW day to relax and recharge. Our comprehensive health and wellbeing offering includes private healthcare, life insurance, group income protection, and regular health assessments, all giving you peace of mind. Secure your future with our defined contribution pension scheme, featuring matched contributions up to 10% from the company.</p>
<p>
We support your growth and balance with hybrid working options, access to an employee assistance programme, and a fully paid volunteer day to make a difference in your community. On top of these, you can opt into a variety of additional perks including an electric vehicle car scheme, share scheme, cycle-to-work programme, dental and optical cover, critical illness protection, and much more. Start making the most of your career and wellbeing with a range of benefits tailored for you.</p>
<p><b>
Equal Opportunity Employer</b></p>
<p>
We&rsquo;re committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email candidatehelpdesk@wtwco.com</p></div></div>

Principal Microsoft Defender XDR & Deception Engineer

JPMorganChase

<div><b>JOB DESCRIPTION</b><br>
<br>
<br>
<div>We have an opportunity to impact your career and provide an adventure where you can push the limits of what's possible.</div><div>
<br>
As a Lead Software Engineer at JPMorganChase within the Commercial &amp; Investment Bank, you are an integral part of an agile team that works to enhance, build, and deliver trusted market-leading technology products in a secure, stable, and scalable way. As a core technical contributor, you are responsible for conducting critical technology solutions across multiple technical areas within various business functions in support of the firm's business objectives.</div><p>
</p><p>you will play a key role in designing, building, and optimizing cloud-native solutions using AWS, microservices architecture, and Kubernetes.</p><p>
Within the Trade Controls and Limits Management team of Markets Technology, you will help deliver a robust multi-asset risk and control management platform supporting low latency trading activities. You will leverage your AWS and cloud engineering skills to architect, maintain, and optimize applications and infrastructure, driving continuous improvement and innovation to ensure platform availability, reliability, and scalability.</p><div>
</div><p><b>Job Responsibilities</b></p><ul><li>
Design, develop, and deploy high-quality, maintainable, and well-tested software solutions on AWS</li><li>
Architect and implement microservices-based applications, leveraging Kubernetes for orchestration and scalability</li><li>
Collaborate with product and engineering teams to deliver reliable, scalable, and efficient software</li><li>
Participate in design reviews to strengthen architectural resilience, fault tolerance, and scalability</li><li>
Drives team adoption of enterprise-authorized AI-assisted engineering practices within the work environment to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across the team.</li><li>
Applies knowledge of tools within the Software Development Life Cycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve the value realized by automation.</li><li>
Develop and maintain monitoring and alerting systems to ensure comprehensive visibility into system health and performance</li><li>
Troubleshoot and resolve complex technical issues to maintain system integrity and performance</li><li>
Champion best practices in software engineering, reliability, and resiliency, and mentor team members</li></ul><div>
</div><p><b>Required Qualifications, Capabilities, and Skills</b></p><ul><li>
Formal training or certification on software engineering concepts and 10+ years of applied experience, with a strong focus on AWS cloud development
</li><li>Hands-on experience building production-grade software in Java</li><li>
Experience with developing and deploying containers, CI/CD and DevOps practices
</li><li>Experience working with both relational and NoSQL databases</li><li>
Demonstrated experience leading effective use of approved AI-assisted software development tools (e.g., for coding, code review, test acceleration, troubleshooting) with the ability to set team expectations for validating AI outputs for correctness, performance, and security.</li><li>
Strong understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs/outputs, and adherence to resiliency and security expectations; experience coaching engineers on safe, compliant adoption within delivery practices</li><li>
Strong knowledge of distributed systems, microservices architecture, and reliability patterns</li><li>
Solid understanding of networking concepts and Unix/Linux environments</li><li>
Experience analyzing, troubleshooting, and supporting large-scale, cloud-native systems</li></ul><div>
</div><p><b>Preferred Qualifications, Capabilities, and Skills</b></p><ul><li>
Advanced knowledge of Java, object-oriented programming, and the JVM, especially in AWS environments</li><li>
Experience with infrastructure as code and modern monitoring/observability practices</li><li>
Experience working in the financial or fintech industry</li></ul>
<b>ABOUT US</b>
<br>
<br>
J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.<br>
<div><div>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.<br>
</div></div><br>
<br>
<b>ABOUT THE TEAM</b>
<br>
<br>
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.</div>

Lead Java Full-Stack AWS Software Engineer - Vice President

<div><b>JOB DESCRIPTION</b><br>
<br>
<br>
<p>Join us to directly influence the future of technology at JPMorganChase. As a Senior DevSecOps Architect, you'll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real impact are valued here. Grow your skills in a dynamic environment designed for achievers. Help us build products that prioritize security from the start.</p>
<p><b>Job Summary:</b></p>
<p>As a Senior DevSecOps Architect in the Cybersecurity &amp; Technology Controls team for International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will embed security culture, lead threat modeling, and drive architecture reviews to ensure our products are secure by design. Your role will be pivotal in managing emerging risks, influencing product strategy, and serving as the subject matter expert for the DevSecOps strategy as well as embedding automated security controls into CI/CD pipelines. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging technologies.</p>
<p><b>Job Responsibilities:</b></p>
<ul><li>Pipeline Security Architecture - Design, implement, and continuously improve security architecture for CI/CD pipelines and DevOps toolchains, ensuring automated security checks are embedded at every stage from code commit to production deployment.</li>
<li>Security-as-Code Leadership - Champion Infrastructure as Code (IaC) and Security-as-Code practices, including policy enforcement, security linting, and automated compliance validation across cloud environments.</li>
<li>Threat Modeling &amp; Architecture Reviews - Lead advanced threat modeling (e.g., STRIDE-LM) for pipelines, microservices, and cloud-native applications, and conduct architecture reviews to drive adoption of secure design patterns.</li>
<li>Automated Guardrails at Scale - Design and deploy automated preventive and detective guardrails to proactively reduce risk across CICD pipelines, cloud and SaaS environments.</li>
<li>Security Culture &amp; Enablement - Cultivate a security-first culture across product, technology, and business teams by providing developer-friendly tooling, training, and reusable secure patterns that accelerate rather than hinder delivery.</li>
<li>Risk &amp; Issue Management - Act with urgency to manage emerging security issues, monitor risk indicators, and recommend resolutions. Serve as the escalation point for IT Risk and Cyber domains related to DevSecOps and Change Management.</li>
<li>Stakeholder Partnership - Partner with engineering leads, product owners, and vendors to ensure effective technology risk management, translating regulatory and policy requirements into actionable, engineer-friendly controls.</li>
<li>Audit &amp; Regulatory Support - Support audit, regulatory, and risk activities by providing evidence of control effectiveness and translating compliance requirements into automated, repeatable processes.</li>
<li>Continuous Improvement - Identify and address unfamiliar technology components, share best practices, and influence peers to drive continuous improvement in DevSecOps maturity across the organization.</li>
</ul><p></p><p><b>Required Qualifications, Capabilities, and Skills:</b></p>
<ul><li>Advanced threat modeling experience (e.g., STRIDE-LM) for DevOps/CICD Pipelines and toolchains.</li>
<li>Expert ability to advise and influence secure pipeline architecture using Policy-as-Code and automated gates.</li>
<li>Hands-on security expertise in AWS and GCP.</li>
<li>Practical experience creating reference architectures and patterns for engineering teams.</li>
<li><p>Proven ability to design and deploy automated preventive and detective guardrails at scale.</p>
</li><p></p><li>Expertise in leveraging IaC scanning to detect misconfigurations and compliance violations across Terraform and Kubernetes manifests</li>
<li>Hands-on experience in integrating a comprehensive DevSecOps tooling stack, including SAST, SCA, RASP, IAST, container and image scanning, secrets detection, and AI-powered DAST solutions</li>
<li>Experience implementing and managing SBOMs to track internal, third-party risk and supply chain security.</li>
<li>Ability to solve design and functionality problems independently.</li>
<li>Strong written and verbal communication skills.</li>
<li>Demonstrated success in influencing peers and stakeholders.</li>
<li>Ability to evaluate and recommend emerging technologies for future state architecture.</li>
</ul><p></p><p><b>Preferred Qualifications, Capabilities, and Skills:</b></p>
<ul><li>Shift-Left/Start-Left Evangelism - A proven track record of mentoring developers and fostering a culture where security is a shared responsibility</li>
<li>Relevant certifications: AWS Certified Security - Specialty, GCP Professional Cloud Security Engineer, CISSP, CKS, OSCP.</li>
<li>Experience operating in regulated organizations with a 3LoD model.</li>
<li>Willingness to challenge existing processes respectfully.</li>
<li>Experience translating policy and regulatory requirements into control design for engineers and architects.</li>
<li>Proven ability to upskill and learn modern technologies.</li>
<li>Experience in financial services consumer businesses or Fintech organizations.</li>
</ul><p></p><p>#ICBCareers</p>
<b>ABOUT US</b>
<br>
<br>
J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.<br>
<div><div>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.<br>
</div></div><br>
<br>
<b>ABOUT THE TEAM</b>
<br>
<br>
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.</div>

Senior DevSecOps Architect

Explore 110+ Principal cloud architect in London this July. Find roles across top companies and apply now to boost your career.