Architect - DevOps 4D

Genpact LLC; New York (NY); Hybrid; USD 80,000 - 100,000; Full time

Job summary

Genpact LLC seeks a skilled Architect to design, build, and secure scalable AWS infrastructure using Terraform, CI/CD pipelines, and policy-as-code tools. You will implement guardrails and automate compliance across multi-account AWS environments.

Role emphasizes DevSecOps, security automation, and adherence to NIST/CIS benchmarks while advancing Genpact's AI and cloud initiatives.

Qualifications

• Bachelor's degree in Computer Engineering, CS, or IT.
• Strong hands-on experience with AWS and DevSecOps practices.
• Experience building and securing cloud infrastructure.

Responsibilities

• Design, build, and maintain scalable infrastructure on AWS.
• Develop reusable Terraform modules for provisioning cloud infrastructure.
• Build and maintain automated CI/CD pipelines for infrastructure and application deployments.
• Implement Infrastructure as Code governance, validation, testing, and deployment controls.
• Define and enforce security guardrails across AWS environments.
• Integrate security and compliance checks into CI/CD pipelines.
• Automate validation of Terraform plans before infrastructure deployment.
• Map cloud controls to NIST and CIS frameworks.
• Support multi-account AWS environments and enterprise landing zones.

Skills

AWS Development

DevSecOps

Terraform

Terraform Enterprise

CI/CD Pipelines

GitHub Actions

Jenkins

Python

Bash

PowerShell

Open Policy Agent

Sentinel

Kubernetes

Docker

IAM

Cloud Security

Education

Bachelor\'s - Computer Engineering

Bachelor\'s - Computer Science

Bachelor\'s - Information Technology

Master\'s - Computer Science

Tools

Terraform

Terraform Enterprise

HCP Terraform

GitHub Actions

Jenkins

Kubernetes

Docker

HashiCorp Vault

Sentinel

Open Policy Agent

AWS IAM

Job description

Architect - DevOpsReady to turn bold ideas into real-world impact? At Genpact, we don’t just adapt to change, we lead it. AI and digital innovation are transforming the way businesses work, and we’re at the forefront of it. Genpact’s AI Gigafactory, our industry-first accelerator, exemplifies how we scale advanced technology solutions to help global enterprises work smarter, grow faster, and transform at scale. Whether tackling complex challenges through large-scale models or agentic AI, our breakthrough solutions tackle companies’ most complex challenges.If you thrive in a fast-moving, innovation-driven environment, love building and deploying cutting-edge AI solutions, and want to push the boundaries of what’s possible, this is your moment.Genpact (NYSE: G) is an agentic and advanced technology solutions company. We leverage process intelligence and artificial intelligence to deliver measurable outcomes. With a strong partner ecosystem and decades of client trust, we provide innovative solutions that transform how businesses run. Powered by a team with an active learning mindset and client centricity at its core, we deliver lasting value for the world’s leading enterprises. Get to know us at genpact.com and on LinkedIn, YouTube, X, and Facebook.Job DescriptionResponsibilities· Design, build, and maintain scalable and secure infrastructure on AWS.· Develop reusable Terraform modules for provisioning cloud infrastructure.· Build and maintain automated CI/CD pipelines for infrastructure and application deployments.· Implement Infrastructure as Code governance, validation, testing, and deployment controls.· Implement Policy as Code using tools such as:o HashiCorp Sentinelo Open Policy Agent (OPA)· Define and enforce security guardrails across AWS environments.· Integrate security and compliance checks into CI/CD pipelines.· Implement preventive and detective cloud security controls.· Automate validation of Terraform plans before infrastructure deployment.· Develop policies covering areas such as:o IAM and least privilegeo Encryptiono Network securityo Public resource exposureo Logging and monitoringo Tagging standardso Approved AWS services and configurationso Data protection· Work with security teams to translate security requirements into automated technical controls.· Map cloud controls to industry security frameworks including NIST.· Support implementation of controls aligned with:o NIST Cybersecurity Frameworko NIST SP 800-53o CIS Benchmarkso AWS Security Best Practices· Implement AWS security services such as IAM, KMS, CloudTrail, Config, GuardDuty, Security Hub, CloudWatch, and AWS Organizations.· Support multi-account AWS environments and enterprise landing-zone architectures.· Implement automated compliance monitoring and remediation.· Troubleshoot infrastructure, deployment, security, and pipeline issues.· Participate in architecture reviews and continuously improve DevSecOps practices.· Strong hands-on experience with AWS.· Strong experience with Terraform / Terraform Enterprise / HCP Terraform.· Experience creating reusable Terraform modules and managing Terraform state.· Strong understanding of Infrastructure as Code practices.· Experience building CI/CD pipelines using one or more of:o GitHub Actionso Jenkins· Strong understanding of Git-based development workflows.· Experience implementing Policy as Code.· Hands-on experience with Sentinel and/or Open Policy Agent (OPA).· Understanding of DevSecOps and shift-left security practices.· Good understanding of AWS IAM, networking, encryption, logging, monitoring, and cloud security.· Experience implementing security controls within automated deployment pipelines.· Familiarity with NIST, CIS, and cloud security control frameworks.· Experience with scripting using Python, Bash, or PowerShell.· Good understanding of containers and modern cloud-native deployment practices.· AWS Organizations and Control Tower.· AWS Config Rules and Service Control Policies.· Security Hub and GuardDuty.· Kubernetes / EKS.· Docker.· HashiCorp Vault.· Secrets management.· SAST, DAST, dependency scanning, and container security tools.· Experience working in regulated enterprise environments.· Experience designing enterprise cloud landing zones.QualificationsBachelors - Computer Engineering, Bachelors - Computer Science, Bachelors - Information Technology, Masters - Computer ScienceCertificationsCertified Kubernetes Administrator (CKA) - CNCF (Cloud Native Computing Foundation)CNCF (Cloud Native Computing Foundation), HashiCorp Certified Terraform Associate - UdemyUdemyRequired SkillsAgile Methodology, AWS Development, DevOps Process Flow, DevSecOps, Docker (Software), KubernetesLanguageEnglish (Required)Language Proficiency -Proficient - C2Additional Job Location -Job TypeRegularMaster Skill List -DevOpsRemote Type -HybridWork Shift -Day Job (United States of America)The approximate annual base compensation range for this position is:80,000 to 100,000 USD“Los Angeles California-based candidates are not eligible for this role”The actual offer, reflecting the total compensation package plus benefits, will be determined by a number of factors which include but are not limited to the applicant’s experience, knowledge, skills, and abilities; geographic location; and internal equity.Why join Genpact?• Lead AI-powered transformation – Drive innovation and solve real-world business challenges that matter• Make an impact – Help global enterprises solve business challenges that matter• Accelerate your career – Gain hands-on experience, mentorship, and world-class learning opportunities to stay ahead• Work with the best – Join 140,000+ bold thinkers and problem-solvers who push boundaries every day• Thrive in a values-driven culture – Our courage, curiosity, and incisiveness - built on a foundation of integrity and inclusion - allow your ideas to fuel progressCome join the 140,000+ coders, tech shapers, and growth makers at Genpact and take your career in the only direction that matters: Up.Let’s build tomorrow together.Genpact is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. Genpact is committed to creating a dynamic work environment that values respect and integrity, customer focus, and innovation.Furthermore, please do note that Genpact does not charge fees to process job applications and applicants are not required to pay to participate in our hiring process in any other way. Examples of such scams include purchasing a 'starter kit,' paying to apply, or purchasing equipment or training.