DevSecOps & Infrastructure Architect

Venturenix Limited; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

Venturenix Limited in Hong Kong is seeking a Senior DevSecOps & Infrastructure Architect to own the design, security, and operation of mission-critical IT infrastructure and development ecosystems.

You will embed zero-trust, data privacy, and Government compliance into CI/CD pipelines while building AI-assisted development sandboxes and managing hardware-accelerated workloads; ensuring high availability and robust disaster recovery.

Qualifications

• Bachelor’s degree in CS/IT/InfoSec or related field.
• 5+ years hands-on experience in IT infrastructure architecture, system administration, and network security.
• Experience with CI/CD pipelines, containerization (Docker/Kubernetes), and automated security testing tools.
• Knowledge of zero-trust security principles and high-security enterprise environments.
• Interest in hardware-accelerated workloads and self-hosting local computing models.

Responsibilities

• Design, deploy, and manage scalable, high-availability production environments with DR and resilience.
• Provision and maintain secure, isolated Local AI-assisted development sandboxes.
• Build and maintain CI/CD pipelines with integrated security scanning and vulnerability checks.
• Enforce end-to-end security measures, zero-trust architecture, and access controls.
• Ensure compliance with government security, data privacy, and governance guidelines.

Skills

CI/CD

Zero-trust security

Security architecture

Automation

Education

Bachelor’s degree in CS/IT/InfoSec

Tools

Docker

Kubernetes

Security testing tools

Job description

We are seeking a highly skilled Senior DevSecOps & Infrastructure Architect to lead the design, security, and operation of our mission-critical IT infrastructure and development ecosystems.

In this role, you will architect resilient, high-availability production environments while building state-of-the-art Local AI-assisted development sandboxes. You will play a pivotal role in embedding security directly into our CI/CD pipelines and ensuring strict adherence to Government compliance, zero-trust principles, and data privacy standards.

Key Responsibilities

Production Infrastructure Architecture: Design, deploy, and manage scalable, high-availability, public-facing production environments with robust disaster recovery and high-resilience standards.

AI-Assisted Development Environments: Provision and maintain secure, isolated in-house development sandboxes tailored for Local AI-assisted engineering workflows and hardware-accelerated workloads.

DevSecOps & Automation: Build and maintain self-contained CI/CD pipelines with automated security scanning, vulnerability checks, and dependency management integrated into the deployment lifecycle.

Security Enforcement: Enforce comprehensive end-to-end security measures, zero-trust network architectures, and access controls across all infrastructure tiers.

Compliance & Governance: Ensure all cloud, on-premise, and deployment processes strictly comply with Government Security & Compliance guidelines and data privacy regulations.

Key Requirements

Bachelor’s degree in Computer Science, Information Technology, Information Security, or a related technical discipline.

Minimum 5+ years of proven hands-on experience in IT infrastructure architecture, system administration, and network security.

Deep knowledge of modern network architecture, zero-trust security principles, and managing high-security / restricted enterprise environments.

Hands-on experience designing and operating CI/CD pipelines, containerization strategies (e.g., Docker, Kubernetes), and automated security testing tools.

Strong interest in managing hardware-accelerated workloads (e.g., GPU workstations/servers) and self-hosting local computing models.

Strong analytical mindset with an uncompromising commitment to system security, data privacy, and quality assurance.

Preferred Qualifications / Good to Have

Relevant professional certifications in security or architecture (e.g., CISSP, CISM, CCSP, or recognized networking/cloud credentials).