Principal DevSecOps Engineer/Architect

Goodfit; Hyderabad; On-site; INR 4,200,000 - 6,000,000; Full time

Job summary

Goodfit seeks a Principal DevSecOps Engineer/Architect in Hyderabad (On-site) with deep expertise in Terraform, Atlantis, and large-scale multi-cloud environments. The role is client-facing, focusing on designing and governing secure, scalable infrastructure and CI/CD platforms for enterprise clients.

You will define standards, governance models, and automation frameworks, extending beyond implementation to drive DevSecOps maturity across organizations.

Qualifications

• 8-10 years of experience in DevSecOps/architecture roles.
• Strong expertise in Terraform, Atlantis, and managing 200–300+ cloud accounts.
• Client-facing consulting experience with governance and automation frameworks.

Responsibilities

• Architect and standardize end-to-end DevSecOps platforms.
• Design secure, scalable CI/CD pipelines (Jenkins & GitHub Actions).
• Embed security gates (SAST, DAST, SCA) into pipelines.
• Define reusable pipeline templates across teams/business units.
• Design Terraform architectures across 200–300+ accounts.
• Build Atlantis workflows for automated plan/apply.
• Enforce policy-as-code and drift detection.
• Manage multi-cloud landing zones and governance frameworks.
• Implement security, cost optimization, and high availability.

Skills

Terraform

Atlantis

Multi-account AWS

Jenkins

GitHub Actions

GitOps

AWS Organizations

Azure/GCP

SAST

DAST

SCA

Container security

Kubernetes security

Secrets management

Python

Bash

Tools

Jenkins

GitHub Actions

Terraform

Atlantis

AWS

Azure/GCP

OPA / Sentinel

Job description

Job Description

• Job Title: Principal DevSecOps Engineer/Architect

• Experience: 8-10 Years

• Location: Hyderabad, India (On-site)

Job Summary

We are seeking a Principal DevSecOps Engineer/Architect with deep expertise in Terraform, Atlantis, and large-scale multi-cloud environments (200–300+ accounts/subscriptions). This is a client-facing consulting role, responsible for designing and governing secure, scalable infrastructure and CI/CD platforms across enterprise environments.

This role goes beyond implementation, you will define standards, governance models, and automation frameworks for large organizations operating at scale.

Key Responsibilities

Enterprise DevSecOps Architecture

• Architect and standardize end-to-end DevSecOps platforms

• Design secure, scalable CI/CD pipelines using Jenkins & GitHub Actions

• Embed security gates (SAST, DAST, SCA, container security) into pipelines

• Define reusable pipeline templates across multiple teams/business units

Terraform + Atlantis (Must-Have, Core Focus)

• Design and manage large-scale Terraform architecture across 200–300+ cloud accounts

• Implement Terraform modules, remote backends, and state isolation strategies

• Build and manage Atlantis workflows for automated Terraform plan/apply

• Enforce:
  Code reviews & approvals for infra changes
  Policy-as-code (OPA / Sentinel)
  Drift detection & remediation

Multi-Cloud Architecture (AWS + Azure/GCP)

• Architect multi-cloud landing zones and governance frameworks

• Manage large account structures:
  AWS Organizations (multi-account strategy)
  Azure Management Groups / Subscriptions

• Implement:
  Network segmentation (VPC/VNet design)
  Identity federation (SSO, IAM, RBAC)
  Cross-account access models

• Ensure high availability, scalability, and cost optimization

Security & Compliance at Scale

• Implement DevSecOps controls aligned with SOC 2, PCI-DSS, GDPR

• Integrate tools like:
  JFrog Xray (SCA)
  SonarQube (SAST)
  Trivy / Prisma / Wiz (container & cloud security)

• Build policy-as-code frameworks for compliance enforcement

• Automate evidence collection for audits

Artifact & Dependency Management

• Architect secure artifact lifecycle using JFrog Artifactory

• Implement access control, immutability, and vulnerability scanning

• Standardize dependency management across teams

Observability & Reliability

• Implement centralized logging/monitoring:

• CloudWatch, ELK, Prometheus/Grafana

• Define SLOs/SLIs for platform reliability

• Reduce MTTR via automation and alerting

Consulting & Leadership

• Act as a trusted advisor to enterprise clients

• Lead architecture discussions and DevSecOps transformation programs

• Mentor teams and enforce engineering best practices

• Drive platform adoption across multiple business units

Required Skills

Infrastructure as Code (Core)

• Terraform (Expert level)

• Atlantis (Hands-on implementation at scale)

• Strong experience with multi-account architecture (200–300+ accounts)

DevOps Tooling

• Jenkins (advanced pipelines)

• GitHub Actions (enterprise workflows)

• GitOps practices

Cloud Platforms

• AWS (Expert) – Organizations, IAM, VPC, Security services

• Experience with Azure or GCP (multi-cloud exposure required)

Security Stack

• SAST, DAST, SCA tools integration

• Container security & Kubernetes security

• Secrets management (Vault / AWS Secrets Manager)

Programming/Scripting

• Python / Bash (automation focus)

Preferred Qualifications

• Experience with Kubernetes (EKS/AKS/GKE) at scale

• Knowledge of Zero Trust Architecture

• Experience with OPA / Sentinel (policy-as-code)

• Familiarity with platform engineering concepts (Internal Developer Platforms)

Certifications (Good to Have)

• AWS Solutions Architect – Professional

• Terraform Associate / Advanced Terraform certifications

• CISSP / CKS (Kubernetes Security)

What Makes This Role Premium

• Ownership of large-scale (200–300 account) cloud environments

• Direct impact on enterprise DevSecOps maturity

• Client-facing architecture & strategy role (not just execution)

• Opportunity to define organization-wide standards