IT Senior Architect - DevSecOps

Job summary

The role provides senior technical authority for enterprise DevSecOps architecture, pipeline strategy, and secure software delivery across commercial, federal, and GovCloud environments supporting government programs with regulated compliance requirements. Responsibilities include defining Jenkins Shared Libraries and CI/CD standards, integrating security scanning and compliance controls, guiding AWS, Azure, and GCP deployment architectures, and leading governance, platform adoption, mentoring, and developer support.

Benefits

Qualifications

• 7+ years of progressive IT experience, with 5+ years in a senior DevSecOps, platform engineering, or software delivery architecture role.
• Must be a United States Citizen.
• Must be eligible to obtain and maintain a U.S. Government Public Trust clearance or Secret clearance; active clearance preferred.
• Deep expertise in CI/CD pipeline design and implementation using GitLab CI/CD, GitHub Actions, and Jenkins
• Hands-on experience with GitLab and GitHub as enterprise source control and pipeline platforms is required.
• Experience managing enterprise artifact repositories (JFrog Artifactory, Nexus, or equivalent)
• Hands-on experience with Infrastructure as Code (IaC): Terraform, AWS CloudFormation, or comparable tooling.
• Experience designing and implementing secure pipelines in regulated environments (FedRAMP, HIPAA, SOC 2, PCI, or NIST 800-53/SSDF)
• Experience with Agile project tracking and collaboration tooling, including Jira, for backlog management, sprint planning, and DevSecOps workflow configuration.

Responsibilities

• Serve as the principal architect for the Max*** enterprise DevSecOps platform, defining reference architectures, pipeline standards, and security guardrails
• Establish and maintain the canonical CI/CD pipeline model, from source control through cloud deployment
• Provide authoritative architecture decisions for multi-environment deployment strategies (dev, staging, production) on AWS, Azure, and GCP
• Embed automated security controls and vulnerability management into CI/CD pipelines
• Ensure all pipeline architectures align with NIST SSDF, FedRAMP, HIPAA, SOC 2, and PCI compliance requirements
• Collaborate with the Information Security Office (ISO) on security architecture reviews, risk acceptance decisions, and continuous compliance monitoring
• Author and maintain enterprise-level architecture documents, white papers, and technical standards for OCDIO-wide consumption
• Provide technical mentorship and upskilling guidance to T3/T4 architects and engineers across the tools and automation practice
• Lead the internal DevSecOps community of practice, driving platform adoption, knowledge sharing, and standardized delivery patterns across business lines
• Define and maintain golden-path pipeline templates and launchpad configurations enabling 65–75% portfolio reuse
• Partner with project teams on onboarding, consulting engagements, escalated platform support, and day-to-day developer support across the Tools Engineering practice

Skills

Certifications

Degrees

Industry

Security clearance

Relocation