Devops architect

About the Role

We are looking for a skilled Dev Sec Ops Engineer with a strong background in Python scripting, cloud security, and automation. The ideal candidate will design, implement, and maintain secure Dev Ops pipelines and infrastructure while integrating security practices throughout the software development lifecycle (SDLC).

This role requires deep knowledge of CI / CD, Kubernetes, Ia C, vulnerability management, and cloud-native security frameworks.

Key Responsibilities

Implement and manage secure CI / CD pipelines integrating automated security testing (SAST, DAST, dependency checks).

Develop Python scripts and automation tools for security validation, compliance checks, and system hardening.

Collaborate with development and operations teams to embed security best practices into build and deployment workflows.

Configure and maintain Kubernetes clusters (EKS / GKE / AKS) with a focus on security controls like RBAC, network policies, and pod security.

Manage Infrastructure as Code (Ia C) using Terraform, Cloud Formation, or similar tools with integrated compliance checks.

Implement vulnerability scanning (e.g., Trivy, Aqua, Anchore) and image signing for containerized environments.

Integrate Secret Management solutions (Hashi Corp Vault, AWS Secrets Manager, or SOPS).

Monitor infrastructure and applications using tools like Prometheus, Grafana, ELK, and implement alerting for security incidents.

Ensure compliance with frameworks such as CIS Benchmarks, NIST, or OWASP standards.

Conduct regular threat modeling and participate in security audits.

Required Skills & Experience

7+ years of experience in Dev Sec Ops, Cloud Security, or Dev Ops Engineering.

Strong programming / scripting experience in Python for automation and security tooling.

Proficiency with CI / CD tools (Jenkins, Git Lab CI, Git Hub Actions, or Argo CD).

Experience with Kubernetes and container orchestration (EKS, GKE, AKS).

Expertise in Cloud Platforms (AWS / Azure / GCP).

Knowledge of IAM policies, RBAC, security groups, and network access controls.

Hands-on with Terraform, Helm, Docker, and Linux system administration.

Understanding of API security, web application firewalls (WAF), and TLS / SSL management.

Familiarity with static and dynamic code analysis tools like Sonar Qube, Bandit, or Checkov.

Experience with logging and monitoring using ELK, Cloud Watch, or Splunk.