Secure Cloud Solutions Architect

We are seeking a highly skilled and forward-thinking Senior Cloud DevSecOps Engineer to join our team.

This role demands deep technical expertise across cloud platforms, security-first DevSecOps practices, and modern infrastructure tooling.

• Collaboration: Ensure secure, reliable, and high-performing software delivery with cross-functional teams.
• CICD Pipeline Design: Implement end-to-end CI/CD pipelines using tools like Jenkins, GitHub Actions, GitLab CI, Azure DevOps, and ArgoCD.
• Cloud Infrastructure Management: Architect and manage multi-cloud infrastructure (AWS, Azure, GCP) using Infrastructure as Code (IaC) tools such as Terraform, Pulumi, and AWS CloudFormation.
• Container Orchestration: Implement container orchestration with Kubernetes (EKS, AKS, GKE), including Helm charts, Operators, and service meshes (Istio, Linkerd).
• DevSecOps Policies: Develop and enforce DevSecOps policies including vulnerability scanning, secrets management, and compliance automation using tools like Snyk, Aqua Security, HashiCorp Vault, and Open Policy Agent (OPA).
• Security Integration: Integrate security controls into CI/CD workflows (e.g., code signing, SBOM generation, DAST/SAST scanning).
• Making Observability Work: Build and maintain monitoring and observability stacks using Prometheus, Grafana, ELK/EFK, Datadog, New Relic, and OpenTelemetry.
• Automation Practices: Automate infrastructure provisioning, configuration management, and patching using Ansible, Chef, Puppet, and SaltStack.
• API Gateway Management: Manage API gateways, service discovery, and traffic routing using tools like Kong, NGINX, Envoy, and AWS API Gateway.
• DR, Backup & HA: Implement disaster recovery, backup strategies, and high availability architectures.
• Optimization: Optimize cloud resources for security, performance, scalability, and cost-efficiency.
• Tooling Contribution: Contribute to internal tooling and open-source projects that enhance DevSecOps capabilities.

• Proven experience designing and supporting scalable, highly available, and secure systems in production environments.
• Deep understanding of DevSecOps principles, including shift-left security, zero trust architecture, and secure SDLC.
• Expertise in CI/CD tooling and automation across multiple platforms (mobile, web, microservices, APIs).
• Advanced knowledge of Kubernetes internals, container runtimes (Docker, containerd), and Linux namespaces/cgroups.
• Proficiency in scripting (Bash, PowerShell) and programming languages such as Python, Go, Java, Kotlin, C++, or JavaScript.
• Strong grasp of networking protocols (TCP/IP, HTTP/HTTPS, DNS, TLS, IPSec) and cloud networking (VPCs, subnets, firewalls).
• Hands-on experience with cloud-native security tools (e.g., AWS GuardDuty, Azure Security Center, GCP Security Command Center).
• Familiarity with GitOps workflows and tools like FluxCD and ArgoCD.
• Experience with artifact repositories and package managers (JFrog Artifactory, Nexus, npm, Maven).
• Knowledge of software supply chain security including SBOMs, provenance, and attestation frameworks (in-toto, Sigstore).
• Strong analytical and troubleshooting skills with a proactive approach to incident response and root cause analysis.

You will work closely with development, security, and operations teams to ensure the seamless, secure, and scalable delivery of software systems.

The ideal candidate thrives in fast-paced environments, embraces automation, and is passionate about continuous improvement and innovation.

• Bachelor's or Master's Degree in Computer Science, Information Technology, Engineering, Cybersecurity, or a related technical field.
• Equivalent practical experience in DevSecOps, cloud engineering, or platform operations will also be considered.