DevSecOps Architect / Consultant - Outside IR35

Outside IR35, Senior DevSecOps Architect / Consultant, hybrid, ISO 27001My client is looking for a Senior DevSecOps Architect / Consultant to lead governance, architecture guidance, and assurance for cloud and infrastructure security across Microsoft Azure, AWS, and key SaaS platforms. This is a hybrid role, so you need to be flexible to attend meetings and workshops. This role is pivotal in defining technical blueprints, setting security standards, and ensuring regulatory compliance with Cyber Essentials Plus, ISO 27001, and Zero Trust principles. You will work closely with IT and platform teams to embed best practices, validate implementations, and support audit readiness across IaaS, PaaS, and SaaS environments.ResponsibilitiesDefine and maintain multi-cloud security standards and reference blueprints (e.g. Azure Policy/Initiatives, AWS Control Tower/SCPs)Own security architecture patterns and contribute to HLD/LLD, threat models, and risk assessmentsSet assurance criteria and control evidence requirements for internal teams and third-party vendorsEstablish policy-as-code requirements and maintain an exceptions register with expiry and risk ownershipDefine identity and access control standards (Entra ID Conditional Access, MFA, PIM; AWS IAM federation)Govern SaaS security onboarding (SSO, OAuth governance, DLP controls, vendor assessments)Specify telemetry and logging requirements for Microsoft Sentinel/SOC and review analytics/reportingLead compliance mapping for ISO ..... full job details .....