DevSecOps Architect

Overview As a DevSecOps Architect, you will lead the integration of security across the software development lifecycle, designing and automating secure-by-default practices in CI/CD pipelines, cloud environments, and infrastructure. You will drive a shift-left security culture and collaborate with cross-functional teams to strengthen security controls, tools, and processes. Your work enables secure software delivery at scale in Azure and AWS environments, with a focus on automation and policy-driven security. This is a hands-on leadership role shaping secure engineering across the organization. ResponsibilitiesDesign and implement enterprise DevSecOps architecture and secure SDLC frameworksBuild and maintain secure CI/CD pipelines with automated security testing (SAST, DAST, SCA, IaC, container, and secrets scanning)Develop security automation, policy-as-code, and compliance-as-code solutionsArchitect and secure cloud environments across Azure and AWSLead application security reviews, threat modeling, vulnerability management, and penetration testing effortsEstablish cloud security guardrails, infrastructure-as-code standards, and container/Kubernetes security controlsCreate developer-focused security tools, training, and best practicesDefine DevSecOps metrics and continuously improve security programs and processesMentor technical teams and promote a culture of shared security ownership Key requirements8+ years of experience in cybersecurity, DevOps, cloud engineering, software engineering, or related disciplines4+ years focused on DevSecOps, application security, or security engineeringHands-on experience with Python, Go, PowerShell, or similar scripting/programming languagesExpertise with Azure and/or AWS cloud security architecturesExperience with Terraform, Ansible, CloudFormation, ARM/Bicep, or other IaC toolsStrong knowledge of CI/CD platforms including GitHub Actions, Azure DevOps, GitLab CI, or JenkinsExperience with SAST, DAST, SCA, container security, IaC scanning, and vulnerability managementKnowledge of Kubernetes, Docker, Zero Trust principles, IAM, and secure software supply chain practicesStrong technical leadershipExcellent communication and stakeholder managementAbility to translate security requirements into practical engineering solutionsPython, Go, PowerShellAzure and/or AWS cloud security architecturesTerraform, Ansible, CloudFormation, ARM/Bicep