DevSecOps Architect

Key Responsibilities

• Platform architecture and lifecycle ownership: Own the architecture, upgrade cadence, and DR planning for the enterprise DevOps toolchain including quarterly upgrades with release plans, backout procedures, and test/prod promotion, plus documented DR runbooks and DR tests.
• Access and governance model design: Lead the redesign of role-based access across GitHub, Artifactory, and the security scanning tools.
• Artifact and repository management: Define repository structure, snapshot vs. release handling, and promotion processing.
• Security, compliance, and credential hygiene: Drive NERC-CIP compliance requirements for DevOps tools, enforce password rotation policy, manage LDAP/service account changes, and support audits and asset ownership tracking.
• Run organizational change management (pilots, training, communications), and manage license renewals, cost estimates, and vendor relationships.
• Proven expertise in DevOps methodologies with a minimum of 6 years of experience.
• Hands-on experience with CI/CD tools and frameworks.

Key Skills required

• CI/CD and source control: GitHub Enterprise administration and automation of repo/project onboarding.
• Artifact and DevSecOps tooling: JFrog Artifactory/Xray, Coverity, Black Duck, and SRM, including vulnerability triage, remediation, and exception handling.
• Containers and infrastructure: OpenShift/Kubernetes, Docker, base images, and platform upgrades, migrations, backup, and DR planning.
• Scripting and automation: Python, PowerShell, shell, and YAML-driven configuration for admin tooling and remediation automation.
• Identity, security, and compliance: LDAP/AD, SSO, RBAC design, CyberArk/password rotation
• Architecture and leadership: Tool evaluation (POCs), integration design (Jira, ServiceNow, LeanIX), stakeholder management, change management, documentation, and vendor/license management.