DevSecOps Architect

Tekskills Inc.; Bengaluru; Hybride; INR 4 000 000 - 7 000 000; Plein temps

Résumé du poste

Tekskills Inc. is seeking a senior DevSecOps Architect to design and implement enterprise security across cloud-native, hybrid, and on‑prem environments. You will architect secure CI/CD pipelines and integrate robust security controls throughout the SDLC.

You will lead vulnerability management, policy-as-code initiatives, and governance practices while guiding platform teams toward secure, scalable deployments across Azure, AWS, and Google Cloud.

Qualifications

• 10+ years of experience in designing and implementing DevSecOps architectures across cloud-native, hybrid, and on-premises environments.
• Experience architecting secure CI/CD pipelines using Azure DevOps, GitHub Actions, GitLab CI/CD, Jenkins, or equivalent.
• Expertise integrating security controls into the SDLC, including SAST, DAST, SCA, container scanning, IaC scanning, secrets management, and policy enforcement.
• Proficiency with Terraform, Bicep, ARM Templates, CloudFormation, or Pulumi for IaC.
• Experience with blue-green, canary, rolling, and zero-downtime deployment strategies.

Responsabilités

• Design and implement enterprise-wide DevSecOps architectures for cloud-native, hybrid, and on‑prem environments.
• Architect secure CI/CD pipelines and ensure continuous security across development and operations.
• Lead vulnerability management programs and remediation across apps, containers, and cloud platforms.
• Implement policy-as-code and governance using Azure Policy, OPA, Gatekeeper, and HashiCorp Sentinel.
• Define security standards, baselines, and best practices for platform engineering and migration projects.

Description du poste

Work Mode: (Hybrid)

Experience: 10+ Years

• 10 Years of experience
• Design and implement enterprise-wide DevSecOps architectures across cloud-native, hybrid, and on-premises environments.
• Architect secure CI/CD pipelines using Azure DevOps, GitHub Actions, GitLab CI/CD, Jenkins, or equivalent automation platforms.
• Integrate security controls into the software development lifecycle, including SAST, DAST, SCA, container scanning, IaC scanning, secrets management, and policy enforcement.
• Design and implement Infrastructure as Code (IaC) frameworks using Terraform, Bicep, ARM Templates, CloudFormation, or Pulumi.
• Develop automated deployment strategies including blue-green, canary, rolling, and zero-downtime deployments.
• Architect containerization and orchestration platforms using Docker, Kubernetes, OpenShift, AKS, EKS, and GKE.
• Build secure software supply chain frameworks, artifact repositories, image registries, and dependency management solutions.
• Design cloud-native security architectures across Microsoft Azure, AWS, and Google Cloud environments.
• Implement policy-as-code and governance frameworks using tools such as Azure Policy, Open Policy Agent (OPA), Gatekeeper, and HashiCorp Sentinel.
• Architect centralized logging, monitoring, observability, and incident response solutions using Azure Monitor, Splunk, Datadog, Dynatrace, ELK, Prometheus, and Grafana.
• Lead vulnerability management programs and security remediation initiatives across applications, containers, cloud platforms, and infrastructure.
• Design identity and access management architectures leveraging Microsoft Entra ID, Okta, OAuth2, OpenID Connect, SAML, RBAC, and Privileged Identity Management (PIM).
• Implement secrets and certificate management solutions using Azure Key Vault, HashiCorp Vault, CyberArk, and cloud-native security services.
• Ensure CI/CD platforms adhere to enterprise security, compliance, and regulatory requirements including SOC 2, ISO 27001, PCI-DSS, HIPAA, NIST, and CIS benchmarks.
• Define and enforce DevSecOps governance standards, architecture patterns, security baselines, and operational best practices.
• Lead cloud migration, modernization, and platform engineering initiatives with a security-first approach.
• Conduct architecture reviews, threat modelling exercises, and security risk assessments for applications and infrastructure.
• Collaborate with development teams to improve deployment automation, release quality, and developer experience.
• Provide technical leadership, mentoring, and guidance to DevOps engineers, developers, security engineers, and platform teams.
• Drive continuous improvement initiatives focused on reliability, scalability, cost optimization, and security posture enhancement.
• Troubleshoot complex production issues and lead root cause analysis for critical incidents.
• Stay current with evolving DevSecOps technologies, security threats, cloud innovations, and industry best practices.