Senior DevSecOps Architect (Remote)-4

Job summary

The Senior DevSecOps Architect role is responsible for leading the architecture and governance of enterprise DevSecOps platforms and secure software delivery pipelines. Key responsibilities include establishing CI/CD standards, integrating security tools such as SAST and SCA, and overseeing Kubernetes and cloud security practices, particularly with GKE. The position requires extensive experience in software engineering and DevSecOps, along with strong leadership in technical governance and risk mitigation.

Qualifications

• 10+ years of total experience in software engineering, DevSecOps, and enterprise architecture roles
• Deep experience with SAST/SCA tooling, Sonatype Nexus, container image security, SBOMs, and supply chain security frameworks
• Proven expertise in Kubernetes, GKE, Helm, and GitOps delivery models
• Proficiency in multi-stage YAML pipelines, scripting, platform engineering, and enterprise secrets management
• Strong track record in technical governance, audit compliance, risk mitigation, and team mentorship

Responsibilities

• Lead the strategy, governance, and rollout of enterprise DevSecOps practices
• Establish standards for branching strategies, pull requests, reusable multi-stage YAML pipelines, approval gates, and embedded security checks
• Integrate SAST, SCA, secret scanning, IaC analysis, container scanning, software bill of materials (SBOM) generation, artifact signing, and policy enforcement into delivery workflows
• Partner with Cloud Architecture teams to implement secure deployment patterns, admission controls, Helm, GitOps workflows, workload identities, and pipeline integrations (specifically GKE)
• Oversee container image registries, image signing, immutability, vulnerability management, and secure artifact management via Sonatype Nexus
• Build reusable pipeline templates, scripts, and secrets-management workflows; evaluate AI-assisted tools to streamline pipeline triage, testing, and operational support
• Support architecture reviews, risk assessments, and audit evidence gathering while mentoring application teams, DSO Champions, and platform engineers

Skills

Relocation