DevSecOps Architect

Job Summary

We are seeking an experienced DevSecOps Architect to lead the design, implementation, and modernization of secure, scalable, and highly reliable deployment and infrastructure platforms across hybrid cloud and on-premises environments. The ideal candidate will have strong hands-on expertise in CI/CD, Kubernetes, Terraform, Harness, cloud infrastructure, automation, security, observability, disaster recovery, and platform engineering.

This role will own the end-to-end delivery lifecycle from development and build through deployment, production operations, rollback, monitoring, and recovery while establishing DevSecOps standards across the organization.

Key Responsibilities

• Lead and own the end-to-end deployment strategy across hybrid public cloud and on-premises environments.
• Design, build, and maintain CI/CD pipelines supporting repeatable, automated, version-controlled releases with rollback and change-management capabilities.
• Package and deploy applications and platform components using Docker, Kubernetes, Helm, and VM-based deployment models where required.
• Design and implement Infrastructure as Code (IaC) and automation using Terraform, CloudFormation, Azure ARM, and Ansible.
• Implement end-to-end release orchestration, including automated deployment, rollback, system recovery, and disaster recovery capabilities.
• Establish and enforce secure configuration-management practices covering TLS, secrets management, certificate lifecycle management, IAM/RBAC, and least-privilege access.
• Build and maintain enterprise observability frameworks covering metrics, logs, distributed tracing, alerting, dashboards, and operational runbooks.
• Modernize existing CI/CD shared libraries into tool-agnostic, reusable, standardized components.
• Define and implement reliability engineering practices covering backup/recovery, disaster recovery, capacity planning, performance optimization, and incident response.
• Automate system recovery and DR processes to improve platform resilience and reduce operational recovery time.
• Develop and maintain Harness templates, pipelines, and platform-management capabilities.
• Support deployment of multi-service applications built with Java, Python, and Node.js.
• Troubleshoot build, configuration, deployment, networking, and runtime issues by reviewing application and infrastructure code.
• Design and operate deployment solutions within restricted, no-egress, proxy-based, and air-gapped environments.
• Develop comprehensive deployment, operational, recovery, and architecture documentation.
• Establish DevSecOps standards, engineering best practices, and reusable deployment patterns across teams.
• Collaborate with application teams, infrastructure teams, security teams, architects, operations, and external partners to ensure successful delivery and production operations.

Required Qualifications

• 5+ years of experience in IT, DevOps, DevSecOps, Cloud Engineering, Platform Engineering, or a related discipline.
• Proven experience owning the complete software delivery lifecycle from development/build through production deployment, rollback, monitoring, and recovery.
• Strong hands-on experience with CI/CD platforms such as Jenkins, GitHub Actions, and Harness.
• Strong experience with Harness templates, pipelines, deployment strategies, and platform management.
• Hands-on experience with Kubernetes and container orchestration, including EKS and/or OpenShift.
• Strong experience with Docker and Helm.
• Experience supporting both containerized and VM-based deployment models.
• Strong Infrastructure as Code experience with Terraform, CloudFormation, Azure ARM, and/or Ansible.
• Strong scripting skills using Python and Bash.
• Experience delivering and deploying multi-service applications using Java, Python, and Node.js.
• Ability to read, understand, and debug application code related to build, configuration, deployment, and runtime issues.
• Strong understanding of networking concepts including DNS, TLS, reverse proxies, load balancing, firewalls, and proxy configurations.
• Strong knowledge of DevSecOps security practices including:
  • Secrets management
  • Certificate management and lifecycle automation
  • IAM/RBAC
  • Least-privilege access
  • Secure configuration
  • Patching
  • Auditing and compliance
• Experience implementing observability solutions covering logs, metrics, traces, alerts, dashboards, and incident management.
• Strong experience automating system recovery, backup/recovery, and disaster recovery processes.
• Experience working in restricted network, no-egress, proxy-based, or air-gapped environments.
• Excellent analytical, troubleshooting, communication, and problem-solving skills.