Senior DevSecOps Architect

Job summary

As a Senior DevSecOps Architect, you will partner with technology and business teams to enhance security practices and address vulnerabilities. Your key responsibilities include designing security architecture for CI/CD pipelines, leading threat modeling initiatives, and implementing automated security controls, particularly in cloud environments. This role is crucial for fostering a security-first culture and managing emerging risks effectively.

Qualifications

• Advanced threat modeling experience
• Expert ability to advise and influence secure pipeline architecture
• Hands-on security expertise in AWS and GCP
• Practical experience creating reference architectures
• Proven ability to design and deploy automated preventive and detective guardrails
• Expertise in leveraging IaC scanning
• Hands-on experience in integrating a comprehensive DevSecOps tooling stack
• Experience implementing and managing SBOMs
• Ability to solve design and functionality problems independently
• Strong written and verbal communication skills

Responsibilities

• Design, implement, and continuously improve security architecture for CI/CD pipelines
• Champion Infrastructure as Code (IaC) and Security-as-Code practices
• Lead advanced threat modeling for pipelines, microservices, and cloud-native applications
• Design and deploy automated preventive and detective guardrails
• Cultivate a security-first culture across product, technology, and business teams
• Act with urgency to manage emerging security issues
• Partner with engineering leads, product owners, and vendors
• Support audit, regulatory, and risk activities
• Identify and address unfamiliar technology components
• Use enterprise-authorized AI capabilities within the work environment

Skills

Certifications

Relocation