DevSecOps Architect

Role: DevSecOps Architect
Location: Remote

Key Responsibilities

• Lead the deployment and operationalization of Socket.dev across enterprise development environments.
• Implement software dependency security controls and open-source governance processes.
• Support Chainguard implementation and adoption of hardened container images.
• Migrate legacy container images to secure, hardened Chainguard images.
• Integrate security controls into CI/CD pipelines and developer workflows.
• Implement automated security checks, policy enforcement, and compliance controls.
• Secure Kubernetes, Docker, and other containerized environments.
• Implement container image scanning, signing, and provenance validation.
• Develop and maintain SBOM strategies and software supply chain governance.
• Partner with development and platform engineering teams to identify and remediate security risks.
• Provide technical guidance, documentation, standards, and operational runbooks.
• Support secure SDLC, vulnerability remediation, and software supply chain security initiatives.

Required Qualifications

• 10+ years of experience in DevOps, DevSecOps, Application Security, or Cloud Security.
• Hands-on experience with software supply chain security and dependency management.
• Strong understanding of CI/CD pipelines and secure development practices.
• Experience with GitHub, GitLab, Azure DevOps, or similar platforms.
• Strong experience with Kubernetes and containerized environments.
• Experience with Software Composition Analysis (SCA) and vulnerability remediation.
• Knowledge of SBOM, container image security, and open-source security.