Senior Specialist - Architecture

Vivantify Technology Solutions India Private Limited; Bengaluru; On-site; INR 300,000 - 540,000; Full time

Benefits offered by this job

Competitive compensation

Opportunities for growth

Collaborative work environment

Job summary

Vivantify Technology Solutions India Private Limited is seeking a Senior DevSecOps Engineer to design, build, and operate secure cryptographic infrastructure and authentication foundations. The role focuses on AWS CloudHSM, Terraform/Terragrunt, JFrog Artifactory, EKS, Kubernetes, and DevSecOps practices.

You will implement Zero Trust, CI/CD governance, and observability across multi-environment cloud infrastructure, ensuring secure deployments and compliance.

Qualifications

• 7-11 years of experience in DevSecOps, Platform Eng or SRE with a security focus.
• Hands-on with AWS CloudHSM, Terraform and Terragrunt, and JFrog Artifactory.
• Experience operating AWS EKS, Kubernetes, Helm, CRDs and service mesh.
• Knowledge of Zero Trust, GitOps and secure CI/CD practices.
• Strong cloud networking knowledge including VPC, IAM, KMS and Route 53.

Responsibilities

• Design, deploy, and operate secure CloudHSM clusters with proper key management and HA.
• Build multi-environment Terraform/Terragrunt modules with governance and policy-as-code.
• Manage JFrog Artifactory including signed builds, images, Helm charts, SBOM, scanning and promotions.
• Operate AWS EKS platforms using Kubernetes, Helm, CRDs and service mesh technolgies.
• Implement Zero Trust controls and secure ingress/egress patterns.
• Develop GitOps and CI/CD pipelines for governed deployments.
• Maintain observability and audit trails of authorization scope and actions.

Skills

DevSecOps / Platform Eng

SRE

Zero Trust

GitOps

CI/CD

Threat modelling

Application Security

Tools

Terraform

Terragrunt

AWS CloudHSM

JFrog Artifactory

Kubernetes

EKS

Helm

CRDs

Istio/Envoy/Linkerd/App Mesh

Job description

Senior Specialist - Architecture

Experience: 7-11 Years

About the Role

We are looking for a Senior DevSecOps Engineer to design, build, and operate secure cryptographic and infrastructure foundations for an agentic authentication platform. The role is a hands-on individual contributor position focused on AWS CloudHSM, Terraform/Terragrunt, JFrog Artifactory, AWS, Kubernetes, and DevSecOps.

Job Description

The role focuses on building and operating secure cloud infrastructure, including AWS CloudHSM cluster design, deployment, key ceremonies, rotation, high availability, and integration with authentication and signing services.

The engineer will develop governed multi-environment infrastructure using Terraform and Terragrunt, manage enterprise artifact governance through JFrog Artifactory, and support EKS platform operations, Helm, CRDs, and service mesh capabilities. The position also involves implementing Zero Trust principles, GitOps/CICD practices, observability, and audit trails.

Key Responsibilities

• Design, deploy, and operate AWS CloudHSM clusters, including key management, rotation, and HA operations.
• Build multi-environment Terraform/Terragrunt modules with appropriate governance and Policy-as-Code practices.
• Manage JFrog Artifactory, including signed builds, container images, Helm charts, SBOM generation, scanning, and promotion policies.
• Operate AWS EKS platforms using Kubernetes, Helm, CRDs, and service mesh technologies.
• Implement Zero Trust controls and secure ingress/egress patterns.
• Design and manage cloud networking, including VPC, DNS, routing, firewalls, IAM, and Route 53.
• Develop GitOps and CI/CD pipelines supporting secure and governed deployments.
• Maintain delegation-chain observability and audit trails to track authorization scope and actions.

Required Skills

• DevSecOps / Platform Engineering / SRE
• AWS CloudHSM
• Terraform and Terragrunt
• JFrog Artifactory
• AWS: VPC, IAM, KMS, EKS, Route 53, security services
• Kubernetes, EKS, Helm, and CRDs
• Cloud networking, DNS, firewalls, and routing
• Zero Trust and service mesh - Istio, Envoy, Linkerd, or App Mesh
• GitOps and CI/CD
• Application Security and DevSecOps
• Secure SDLC, threat modelling, and Application Security Architecture Review

Preferred / Good to Have

• Cryptographic delegation flows, OAuth 2.0, token exchange, and workload identity federation
• Agentic security patterns and scoped-capability tokens
• Policy-as-Code using OPA or Sentinel
• AWS Professional/Specialty certifications
• Kubernetes certifications such as CKA, CKAD, or CKS

Mandatory Skills

• Application Security, including application security frameworks, threat modelling, Secure SDLC, DevSecOps, and Application Security Architecture Review

Candidate Profile

The ideal candidate should have 7+ years of experience in DevSecOps, Platform Engineering, or SRE with a security focus, along with strong hands-on cloud infrastructure expertise. The candidate should be comfortable operating production AWS and Kubernetes environments and working across security, infrastructure, and engineering teams.

Benefits Package

• Competitive salary and benefits package
• Opportunities for professional growth and development
• A collaborative and inclusive work environment
• The opportunity to work on exciting and challenging projects with leading clients