<p><p><b>Job Summary :</b><br/><br/>We are looking for a seasoned DevSecOps Architect with over 12+ years of experience to lead the design and implementation of secure, scalable, and automated DevSecOps solutions.
</p><p><br/></p><p>The ideal candidate will have deep expertise in CI/CD automation, cloud platforms (AWS, Azure, GCP), containerization, infrastructure as code (IaC), and security toolchains.<br/><br/>This role demands a strategic thinker capable of embedding security at every phase of the SDLC, while fostering a culture of collaboration and Zero Trust.<br/><br/><b>Key Responsibilities :</b><br/><br/><b>Architecture & Strategy :</b><br/><br/>- Define and drive the DevSecOps architecture roadmap aligned with business and security objectives.<br/><br/></p><p>- Lead the integration of security into CI/CD pipelines and cloud-native environments.<br/><br/></p><p>- Establish governance for secure coding, deployment, and operations practices.<br/><br/><b>Automation & CI/CD :</b><br/><br/>- Architect and implement automated CI/CD pipelines using tools like Jenkins, GitLab CI, GitHub Actions, Azure DevOps, etc.<br/><br/></p><p>- Embed security tooling (SAST, DAST, IAST) into build and deployment workflows.<br/><br/></p><p>- Champion Infrastructure as Code (IaC) using Terraform, CloudFormation, or Pulumi.<br/><br/><b>Cloud Platforms :</b><br/><br/>- Design secure architectures across AWS, Azure, and GCP.<br/><br/></p><p>- Implement cloud-native security controls, identity management, and compliance frameworks.<br/><br/><b>Containerization & Orchestration :</b><br/><br/>- Architect secure containerized environments using Docker and Kubernetes.<br/><br/></p><p>- Define and enforce policies for image scanning, runtime protection, and cluster hardening.<br/><br/><b>Security & Monitoring :</b><br/><br/>- Integrate and manage tools for static and dynamic code analysis.<br/><br/></p><p>- Implement SIEM solutions and continuous monitoring for threat detection and incident response.<br/><br/></p><p>- Conduct architecture reviews and threat modelling sessions.<br/><br/><b>Collaboration & Culture :</b><br/><br/>- Promote secure coding practices and DevSecOps principles across engineering teams.<br/><br/></p><p>- Advocate for Zero Trust architectures and continuous security validation.<br/><br/></p><p>- Mentor teams on security automation and best practices.<br/><br/><b>Proposal Response & Solutioning :</b><br/><br/>- Collaborate with sales and bid teams during RFP/RFI stages to define DevSecOps strategies.<br/><br/></p><p>- Prepare technical proposals, solution blueprints, and effort estimates.<br/><br/></p><p>- Conduct client workshops, assessments, and presentations articulating DevSecOps value.<br/><br/></p><p>- Lead solution design and oversee implementation for client engagements.<br/><br/><b>Required Skills & Qualifications :</b><br/><br/>- 12+ years in DevOps/DevSecOps, including 3+ years in an architect role.<br/><br/></p><p>- Strong scripting skills (Python, Bash, PowerShell).<br/><br/></p><p>- Expertise in CI/CD tools and IaC frameworks.<br/><br/></p><p>- Hands-on experience with AWS, Azure, and GCP.<br/><br/></p><p>- Deep understanding of containerization and security using Docker/Kubernetes.<br/><br/></p><p>- Familiarity with security tools : SonarQube, OWASP ZAP, Checkmarx, Fortify, etc.<br/><br/></p><p>- Experience with SIEM tools : Splunk, ELK, Azure Sentinel.<br/><br/></p><p>- Knowledge of SSDLC, Zero Trust Architecture, and compliance frameworks (e.g., NIST, ISO, CIS).<br/><br/><b>Preferred Certifications :</b><br/><br/><b>DevSecOps / Cloud Security :</b><br/><br/>- AWS Certified Security Specialty<br/><br/></p><p>- Microsoft Certified : Azure Security Engineer Associate<br/><br/></p><p>- Certified Kubernetes Security Specialist (CKS)<br/><br/><b>Architecture :</b><br/><br/>- TOGAF<br/><br/></p><p>- AWS / Azure Certified Solutions Architect<br/><br/><b>Security :</b><br/><br/>- CISSP<br/><br/></p><p>- CCSP<br/><br/><p><b>Additional Requirements :</b></p><br/>- Must be travel-ready for client engagements and workshops.</p><br/></p> (ref:hirist.tech)