Senior Cloud Security Architect

We are seeking a highly skilled Senior Infrastructure Security and Compliance Engineer to drive the Zero-Touch Build, Upgrade, and Certification pipeline for our on-prem GPU cloud environment.

This role is focused on integrating security scanning, policy enforcement, compliance validation, and backup automation into a fully GitOps-managed GPU cloud stack, spanning hardware → OS → Kubernetes → platform layers.

The successful candidate will design and implement GitOps-native workflows to automate security, compliance, and backup validation as part of the GPU cloud lifecycle.

• Integrate Trivy into CI/CD pipelines for container and system image vulnerability scanning.
• Automate kube-bench execution and remediation workflows to enforce Kubernetes security benchmarks (CIS/STIG).
• Define and enforce policy-as-code using OPA/Gatekeeper to validate cluster and workload configurations.
• Deploy and manage Velero to automate backup and disaster recovery operations for Kubernetes workloads.
• Ensure that all compliance, scanning, and backup logic is declarative and auditable through Git-backed repositories.
• Collaborate with infrastructure, platform, and security teams to define security baselines, enforce drift detection, and integrate automated guardrails.
• Drive remediation automation and post-validation gates across build, upgrade, and certification pipelines.
• Monitor evolving security threats and ensure tooling is regularly updated to detect vulnerabilities, misconfigurations, and compliance drift.

Experience in infrastructure, platform automation, and systems security is essential for this position.

Strong knowledge and practical experience with Trivy, kube-bench, Velero, OPA/Gatekeeper, and GitOps workflows are required.

• 10+ years of hands-on experience in infrastructure, platform automation, and systems security.
• Primary key skills required are Python/Go/Bash scripting, OPA Rego policy writing, CI integration for Trivy & kube-bench, GitOps
• Strong knowledge and practical experience with:
• Trivy for container, filesystem, and configuration scanning
• kube-bench for Kubernetes CIS benchmark compliance
• Velero for Kubernetes-native backup and disaster recovery
• OPA/Gatekeeper for policy-as-code and admission control
• Deep understanding of GitOps workflows (e.g., Argo CD, Flux) and how to integrate security tools declaratively.
• Proven experience automating security, compliance, and backup validation in CI/CD pipelines.
• Solid foundation in Kubernetes internals, RBAC, pod security, and multi-tenant best practices.
• Familiarity with vulnerability management lifecycles and security risk remediation strategies.
• Experience with Linux systems administration, OS hardening, and secure bootstrapping.
• Proficiency in scripting languages such as Python, Go, or Bash for automation and tooling integration.
• Bonus:
• Experience with SBOMs, image signing, or container supply chain security
• Exposure to regulated environments (e.g., PCI-DSS, HIPAA, FedRAMP)
• Contributions to open-source security/compliance projects

• Mid-Senior level
• IT Services and IT Consulting
• Software Development
• Contract
• Information Technology
• Infrastructure Security
• Compliance Engineering

Protect our organization's digital assets by ensuring they are secure, compliant, and backed up. This includes developing and implementing policies, procedures, and technologies to prevent data breaches and cyber attacks.

Design and implement solutions to address emerging security threats and vulnerabilities, including developing and deploying countermeasures to prevent data loss and disruption of services.

Work collaboratively with cross-functional teams to identify and prioritize business requirements, develop solutions, and implement changes to existing systems and processes.

Develop and maintain technical documentation, including procedure guides, user manuals, and release notes to support deployment and maintenance activities.