1,817,880open jobs
104,207companies
275,353added this week
Browse all
Salary
≈ $108k – $189k per year (Estimated)
Location
In office (London)
Seniority
Architect · 8+ years exp

Confirmed on the employer's own hiring board on Oct 17, 2026. First seen by Alion on Sep 21, 2026.

Overview
Company
Impact
Profile match

UST

UST is a digital transformation and technology services company that partners with clients to deliver AI-driven solutions and business outcomes. It hires data scientists, Salesforce integration specialists, Java, .NET and Node.js developers, mainly in Thiruvananthapuram, Kochi, Bengaluru and Hyderabad. The company is headquartered in Thiruvananthapuram, Kerala, India.

Since 1999, UST has worked side by side with the world's best companies to make a powerful impact through transformation.

Headquartered in the United States, UST is powered by technology, driven by AI, inspired by people, and led by our purpose, we partner with our clients from design to operation. Our AI-driven digital solutions, proprietary platforms, engineering, R&D, products, and innovation ecosystem turn core challenges into impactful, disruptive business outcomes.

With deep industry knowledge and a future-ready mindset, we infuse expertise, innovation, and agility into our clients' organizations-delivering measurable value and positive lasting change for them, their customers, and communities around the world. Together, with 30,000+ employees in 30+ countries, we build for boundless impact-touching billions of lives in the process.

Visit us at .

UST FinX was born from a shared passion and unwavering commitment to solve one of the most pressing challenges facing the banking industry today: the technology imprisonment of banks by legacy platforms that stifle innovation, constrain growth, and diminish competitive viability. We are a team of dedicated professionals who came together with a singular vision - to liberate banks from the technological constraints that prevent them from serving their customers and communities to their full potential.

We are looking for a Principal Security Architect - DevSecOps to embed security into every stage of our engineering lifecycle. This is a senior, hands-on technical leadership role - not policy-only, audit-only, or advisory.

Your influence comes from designing secure engineering patterns, automating controls, building guardrails, reviewing real systems, and writing production-grade code and configuration so teams build secure platforms by default. You will define and evolve security architecture across our cloud-native platform, CI/CD pipelines, software supply chain, Kubernetes, container workloads, SaaS integrations, APIs, secrets management, IAM, and runtime controls - working directly with engineering teams to make security part of daily delivery rather than a late-stage approval.

You bring a strong software engineering background, have secured production cloud-native platforms, and know how to balance security, delivery speed, developer experience, and operational resilience.

You translate security principles into reusable patterns, automated checks, policy-as-code, secure defaults, and developer-friendly guardrails, and you stay close to implementation.

In an increasingly AI-assisted environment, you apply engineering judgment to validate, refine, or reject generated outputs, ensuring controls are automated, observable, repeatable, and embedded rather than theoretical or manual.

We value a 360-degree, merit-based culture where senior architects constructively challenge designs and help teams converge on secure, scalable patterns.

What You Will Do

  • Define and evolve the DevSecOps strategy for UST FinX's cloud-native banking transformation platform.
  • Embed security across the SDLC - design, coding, build, test, deployment, runtime, monitoring, and incident response.
  • Design and implement automated security controls across CI/CD pipelines, infrastructure provisioning, application delivery, container images, Kubernetes, and cloud services.
  • Integrate and operationalize SAST, DAST, SCA, container scanning, secrets scanning, and policy-as-code.
  • Define secure engineering standards and reusable guardrails that let teams move quickly within approved boundaries.
  • Apply cloud-native security patterns: IAM, network segmentation, workload identity, secrets management, least privilege, zero trust, runtime security, and auditability.
  • Guide secure architecture for APIs, microservices, event-driven systems, SaaS integrations, and developer tooling.
  • Partner with platform, backend, DevOps, QA, product, and delivery teams so security is built in, not bolted on.
  • Mentor engineers through design reviews, threat modeling, code and pipeline reviews, and pairing.
  • Ensure production systems are secure, observable, resilient, compliant, and ready for regulated banking.

    This role reports directly to the CTO of UST FinX. You will operate as one of the CTO's senior technical lieutenants - creating engineering leverage across the organization while remaining deeply hands-on. You will influence multiple pods, establish reusable standards, mentor technical leaders, challenge weak designs, and turn technical direction into production-quality execution.

    This is neither a passive advisory role nor a traditional people-management role; your authority comes from technical credibility, judgment, and execution.

    Working closely with the CTO, you will define standards, identify engineering gaps, raise delivery quality, and ensure architecture is reflected in real code, platforms, and operational behaviour - a force multiplier who executes, coaches others, and resets the technical bar across UST FinX.

    Skills and Experience We Are Looking For

  • 8+ years in software, security, cloud security, DevSecOps, or platform engineering (10-15 ideal), with production platform ownership.
  • Strong software engineering background - able to read real application code, system design, CI/CD workflows, infrastructure automation, and runtime behaviour.
  • Proven experience securing cloud-native platforms in production.
  • Deep secure-SDLC knowledge: secure design and coding, threat modeling, automated testing, vulnerability and dependency management, release controls, and production readiness.
  • Integrating SAST, DAST, and SCA into CI/CD in a practical, automated, developer-usable way.
  • Container security: image scanning, base-image strategy, registry controls, remediation, runtime configuration, and secure workload deployment.
  • Kubernetes security: cluster hardening, namespace isolation, RBAC, admission control, network policies, workload identity, pod security, secrets, ingress, and runtime protection.
  • Policy-as-code (OPA, Gatekeeper, Kyverno, or equivalent). IAM, least privilege, zero trust, workload identity, service-to-service authentication, and identity-driven security models.
  • Secrets management: secure storage, rotation, access control, pipeline integration, runtime injection, and governance. Securing SaaS integrations and platform architectures: identity, access, data protection, tenant boundaries, and auditability.
  • CI/CD security automation: pipeline hardening, artifact integrity, dependency controls, environment promotion, deployment approvals, rollback safety, and supply-chain security.
  • Production security: reliability, auditability, scalability, incident response, monitoring, ing, and remediation.
  • Strong communication - explaining architecture, risks, and trade-offs to globally distributed teams.
  • Mentoring and technical leadership that raises the standard of surrounding engineers without formal authority.
  • Comfortable in a global, distributed organization with multiple pods, stakeholders, and time zones.

    Preferred Qualifications

  • AWS security: IAM, Organizations, networking, KMS, CloudTrail, GuardDuty, Security Hub, workload identity, private connectivity, and multi-account patterns.
  • Amazon EKS or equivalent Kubernetes in production.
  • IaC security: AWS CDK, Terraform, CloudFormation, static analysis, policy enforcement, and secure module design.
  • GitOps security: repository controls, signed artifacts, environment promotion, drift detection, and deployment guardrails.
  • Software supply-chain security: SBOMs, artifact signing, provenance, dependency controls, and build integrity.
  • Observability and security monitoring: Prometheus, Grafana, CloudWatch, OpenTelemetry, SIEM, tracing, logging, and event correlation.
  • API security: OAuth2/OIDC, mTLS, service mesh, gateway security, rate limiting, token validation, and service-to-service authorization.
  • Financial services, banking, or regulated environments where auditability and operational control are critical.
  • Building reusable security platforms, guardrails, templates, policy libraries, and paved-road patterns consumed by multiple teams.
  • Living with the long-term consequences of architecture decisions - supporting, patching, auditing, scaling, migrating, and evolving secure platforms after adoption.

    What we believe:

    We’re proud to embrace the same values that have shaped UST since the beginning. Since day one, we’ve been building enduring relationships and a culture of integrity. And today, it's those same values that are inspiring us to encourage innovation from everyone, to champion diversity and inclusion, and to place people at the centre of everything we do.

    Humility:

    We will listen, learn, be empathetic and help selflessly in our interactions with everyone.

    Humanity:

    Through business, we will better the lives of those less fortunate than ourselves.

    Integrity:

    We honor our commitments and act with responsibility in all our relationships.

    Equal Employment Opportunity Statement

    UST is an Equal Opportunity Employer.

    All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

    USTreserves the right to periodically redefine your roles and responsibilities based on the requirements of the organization and/or your performance.

  • Free account
    Stop reading job ads. Get the ones that fit.
    One free account turns this page into a shortlist built around your stack, your level and your pay.
    Match on every job. Stack, seniority, pay and location, scored against your profile.
    1,817,880 open roles. Read straight off company career pages, refreshed every day.
    Unlimited applications. Every one you send is tracked in one place, on-site or on a company board.
    3 tailored CVs a month. Rewritten for the exact job you are applying to. Included free.
    Create a free account Continue with Google
    Free forever. No card. Under a minute.

    Your match

    How well do you fit this role?
    Two answers are enough for a real match. No account needed.
    Check my fit
    Answers stay in this browser until you create an account.

    Recommended for you based on this role

    Security
    Similar stack
    Same company
    London
    ≈ $88k – $154k per year (Estimated) • In office • Full-Time • Solihull
    SQL
    DevOps
    Linux
    Cybersecurity
    Ghidra
    IDA Pro
    Management
    Scrum
    Apply
    ≈ $72k – $187k per year (Estimated) • Hybrid • Full-Time • 12+ years exp • United Kingdom • Ireland • Netherlands • Spain • Portugal
    Management
    ServiceNow
    Agile
    Apply
    ≈ $95k – $167k per year (Estimated) • Remote (United Kingdom) • Confidential • Full-Time • 8+ years exp • Bachelor's Degree • London
    DevOps
    Splunk
    Linux
    Windows
    Cybersecurity
    Wireshark
    Volatility
    FTK
    EnCase
    X-Ways Forensics
    Apply
    Security Architect 2 months ago
    $167k – $225k per year • Remote (United Kingdom) • Contractor • 8+ years exp
    Cybersecurity
    ISO 27001
    Apply
    ≈ $110k – $193k per year (Estimated) • Hybrid • Full-Time • 2+ years exp • Bachelor's Degree • London
    Apply
    ≈ $113k – $219k per year (Estimated) • In office • 10+ years exp • Bachelor's Degree • Austin
    Python
    Java
    DevOps
    Splunk
    Terraform
    GCP
    Azure
    CI/CD
    AWS
    Kubernetes
    SRE
    Incident Management
    DNS
    Apply
    Full Stack Engineer 11 hours ago
    ≈ $128k – $233k per year (Estimated) • In office • 7+ years exp • Bachelor's Degree • Austin
    Python
    Java
    C#
    C#
    .NET
    AI/ML
    AI Agents
    Agentic Workflows
    DevOps
    GCP
    CI/CD
    Kubernetes
    Akamai
    API Gateway
    DNS
    Apply
    AI Platform Developer 11 hours ago
    ≈ $128k – $241k per year (Estimated) • In office • 4+ years exp • Austin
    Python
    Databases
    DuckDB
    AI/ML
    Vertex AI
    dbt
    Embeddings
    AI Agents
    LLM
    Multi-Agent Systems
    Tool Use
    DevOps
    Terraform
    GCP
    CI/CD
    Platform Engineering
    Analytics
    Tableau
    Looker
    Management
    Stripe
    Apply
    ≈ $113k – $219k per year (Estimated) • In office • 5+ years exp • Bachelor's Degree • Austin
    Python
    COBOL
    COBOL
    IBM MQ
    Databases
    RabbitMQ
    InfluxDB
    Apache Kafka
    Google BigQuery
    BigQuery
    AI/ML
    Anomaly Detection
    DevOps
    Splunk
    ZooKeeper
    Terraform
    Ansible
    GCP
    Helm
    GitHub Actions
    Datadog
    Prometheus
    CI/CD
    Kubernetes
    Grafana
    Configuration Management
    Self-Healing
    Google GKE
    AIOps
    Incident Management
    Linux
    Apply
    ≈ $116k – $213k per year (Estimated) • In office • 8+ years exp • Bachelor's Degree • Southlake
    JavaScript
    Java
    TypeScript
    Java
    Spring Boot
    Databases
    Apache Kafka
    AI/ML
    Copilot
    Claude Code
    Prompt Engineering
    AI Agents
    Agentic Workflows
    Frontend
    Webpack
    Angular
    npm
    DevOps
    Rest API
    Splunk
    GCP
    CI/CD
    Jenkins
    Docker
    Kubernetes
    Grafana
    AppDynamics
    Bamboo
    Bitbucket
    GitHub
    Management
    Agile
    Scrum
    QA
    Selenium
    Playwright
    Apply
    ≈ $21k – $52k per year (Estimated) • In office • 8+ years exp • Chennai
    Cybersecurity
    CyberArk
    Least Privilege
    Microsoft Entra ID
    Active Directory
    Apply
    L3 SOC Analyst 1 day ago
    ≈ $20k – $42k per year (Estimated) • In office • 7+ years exp • Thiruvananthapuram
    AI/ML
    Red Teaming
    DevOps
    Splunk
    Cybersecurity
    MITRE ATT&CK
    IBM QRadar
    LogRhythm
    SIEM
    Apply
    ≈ $21k – $52k per year (Estimated) • In office • Pune
    DevOps
    Azure
    DNS
    VPN
    Cybersecurity
    Okta
    Zscaler
    Zero Trust
    Microsoft Entra ID
    SIEM
    DLP
    Apply
    Lead Threat Hunter 1 day ago
    ≈ $27k – $59k per year (Estimated) • In office • Thiruvananthapuram
    Python
    AI/ML
    Jupyter Notebook
    Pandas
    DevOps
    GCP
    Azure
    CI/CD
    AWS
    Linux
    Windows
    Unix
    Cybersecurity
    Crowdstrike
    Microsoft Sentinel
    Microsoft Defender
    MITRE ATT&CK
    SIEM
    Apply
    In office • Noida
    PowerShell
    DevOps
    Windows Server
    Linux
    Windows
    Unix
    Cybersecurity
    Qualys Cloud Platform
    Apply
    ≈ $108k – $190k per year (Estimated) • Equity • Remote (United Kingdom) • London
    DevOps
    CI/CD
    Git
    Amazon S3
    Cybersecurity
    Burp Suite
    Zero Trust
    Management
    Slack
    Apply
    Area Supervisor 3 hours ago
    ≈ $45k – $94k per year (Estimated) • In office • Full-Time • Bachelor's Degree • London
    Apply
    ≈ $39k – $71k per year (Estimated) • In office • London
    Apply
    Senior People Partner 12 hours ago
    $73k – $100k per year • Hybrid • Full-Time • London
    AI/ML
    Claude
    Apply
    ≈ $65k – $128k per year (Estimated) • Hybrid • Full-Time • London
    Apply
    See all jobs
    This is one of many
    1,817,880 more open roles from verified company boards, updated every day.