DevSecOps Architect

Job summary

Own the architecture, lifecycle, governance, and compliance of an enterprise DevOps toolchain, including upgrades, disaster recovery, access controls, and artifact management. Administer and integrate tools such as GitHub Enterprise, JFrog Artifactory/Xray, Coverity, Black Duck, and OpenShift/Kubernetes, while supporting NERC-CIP compliance, automation, organizational change, and vendor and license management.

Qualifications

• At least 6 years of experience with DevOps methodologies.
• Hands-on experience with CI/CD tools and frameworks.
• Experience administering GitHub Enterprise and automating repository and project onboarding.
• Experience with artifact and DevSecOps tools, vulnerability triage, remediation, and exception handling.
• Experience with containers, platform upgrades and migrations, backups, and disaster recovery.
• Scripting and automation experience with Python, PowerShell, shell, and YAML.
• Experience with LDAP or Active Directory, SSO, RBAC, and password rotation.
• Experience evaluating tools, designing integrations, managing stakeholders, documenting processes, and handling vendors and licenses.

Responsibilities

• Own architecture, upgrades, and disaster recovery planning for the enterprise DevOps toolchain.
• Redesign role-based access across GitHub, Artifactory, and security scanning tools.
• Define repository structures, snapshot and release handling, and artifact promotion processes.
• Drive NERC-CIP compliance, password rotation, service account changes, audits, and asset ownership tracking.
• Coordinate organizational change management, including pilots, training, and communications.
• Manage license renewals, cost estimates, and vendor relationships.

Skills

Relocation