Architect - DevOps 4D

Genpact Ltd.; New York, Northern (NY, KY); Hybrid; USD 80,000 - 100,000; Full time

Job summary

Genpact Ltd. is seeking an Architect - DevOps to design, implement, and secure scalable AWS infrastructure. You will build reusable Terraform modules, automate CI/CD for infra and apps, and enforce security controls across multi-account environments.

You will work with security teams to translate requirements into automated technical controls, align with NIST/CIS frameworks, and advance our shift-left approach to cloud security.

Qualifications

• Bachelor's degree in a technical field (e.g., Computer Engineering, Computer Science, IT).
• Strong experience with AWS, Terraform, CI/CD pipelines and cloud security controls.
• Hands-on DevSecOps on large-scale AWS environments with Terraform-based IaC.

Responsibilities

• Design, build, and maintain scalable infrastructure on AWS.
• Develop reusable Terraform modules for provisioning cloud infra.
• Build and maintain automated CI/CD pipelines for infrastructure and app deployments.
• Implement Infrastructure as Code governance, validation, testing, and deployment controls.
• Define and enforce security guardrails across AWS environments.
• Integrate security/compliance checks into CI/CD pipelines and automate controls.
• Provide automated validation of Terraform plans prior to deployment.
• Work with security teams to translate requirements into automated controls.

Skills

AWS Development

DevSecOps

Docker

Kubernetes

Terraform

CI/CD

GitHub Actions

Python scripting

Security & Compliance

Threat modeling

Education

Bachelors - Computer Engineering

Bachelors - Computer Science

Masters - Computer Science

Tools

Terraform Enterprise

HCP Terraform

GitHub Actions

Open Policy Agent (OPA)

Job description

Architect - DevOps Ready to turn bold ideas into real-world impact? At Genpact, we don’t just adapt to change, we lead it. AI and digital innovation are transforming the way businesses work, and we’re at the forefront of it. Genpact’s AI Gigafactory, our industry-first accelerator, exemplifies how we scale advanced technology solutions to help global enterprises work smarter, grow faster, and transform at scale. Whether tackling complex challenges through large-scale models or agentic AI, our breakthrough solutions tackle companies’ most complex challenges. If you thrive in a fast-moving, innovation-driven environment, love building and deploying cutting-edge AI solutions, and want to push the boundaries of what’s possible, this is your moment. Genpact (NYSE: G) is an agentic and advanced technology solutions company. We leverage process intelligence and artificial intelligence to deliver measurable outcomes. With a strong partner ecosystem and decades of client trust, we provide innovative solutions that transform how businesses run. Powered by a team with an active learning mindset and client centricity at its core, we deliver lasting value for the world’s leading enterprises. Get to know us at genpact.com and on LinkedIn, YouTube, X, and Facebook. Job Description Responsibilities · Design, build, and maintain scalable and secure infrastructure on AWS. · Develop reusable Terraform modules for provisioning cloud infrastructure. · Build and maintain automated CI/CD pipelines for infrastructure and application deployments. · Implement Infrastructure as Code governance, validation, testing, and deployment controls. · Implement Policy as Code using tools such as: o HashiCorp Sentinel o Open Policy Agent (OPA) · Define and enforce security guardrails across AWS environments. · Integrate security and compliance checks into CI/CD pipelines. · Implement preventive and detective cloud security controls. · Automate validation of Terraform plans before infrastructure deployment. · Develop policies covering areas such as: o IAM and least privilege o Encryption o Network security o Public resource exposure o Logging and monitoring o Tagging standards o Approved AWS services and configurations o Data protection · Work with security teams to translate security requirements into automated technical controls. · Map cloud controls to industry security frameworks including NIST. · Support implementation of controls aligned with: o NIST Cybersecurity Framework o NIST SP 800-53 o CIS Benchmarks o AWS Security Best Practices · Implement AWS security services such as IAM, KMS, CloudTrail, Config, GuardDuty, Security Hub, CloudWatch, and AWS Organizations. · Support multi-account AWS environments and enterprise landing-zone architectures. · Implement automated compliance monitoring and remediation. · Troubleshoot infrastructure, deployment, security, and pipeline issues. · Participate in architecture reviews and continuously improve DevSecOps practices. · Strong hands-on experience with AWS. · Strong experience with Terraform / Terraform Enterprise / HCP Terraform. · Experience creating reusable Terraform modules and managing Terraform state. · Strong understanding of Infrastructure as Code practices. · Experience building CI/CD pipelines using one or more of: o GitHub Actions o Jenkins · Strong understanding of Git-based development workflows. · Experience implementing Policy as Code. · Hands-on experience with Sentinel and/or Open Policy Agent (OPA). · Understanding of DevSecOps and shift-left security practices. · Good understanding of AWS IAM, networking, encryption, logging, monitoring, and cloud security. · Experience implementing security controls within automated deployment pipelines. · Familiarity with NIST, CIS, and cloud security control frameworks. · Experience with scripting using Python, Bash, or PowerShell. · Good understanding of containers and modern cloud-native deployment practices. · AWS Organizations and Control Tower. · AWS Config Rules and Service Control Policies. · Security Hub and GuardDuty. · Kubernetes / EKS. · Docker. · HashiCorp Vault. · Secrets management. · SAST, DAST, dependency scanning, and container security tools. · Experience working in regulated enterprise environments. · Experience designing enterprise cloud landing zones. Qualifications Bachelors - Computer Engineering, Bachelors - Computer Science, Bachelors - Information Technology, Masters - Computer Science Certifications Certified Kubernetes Administrator (CKA) - CNCF (Cloud Native Computing Foundation)CNCF (Cloud Native Computing Foundation), HashiCorp Certified Terraform Associate - UdemyUdemy Required Skills Agile Methodology, AWS Development, DevOps Process Flow, DevSecOps, Docker (Software), Kubernetes Language English (Required) Language Proficiency - Proficient - C2 Additional Job Location - Job Type Regular Master Skill List - DevOps Remote Type - Hybrid Work Shift - Day Job (United States of America) The approximate annual base compensation range for this position is: 80,000 to 100,000 USD “Los Angeles California-based candidates are not eligible for this role” The actual offer, reflecting the total compensation package plus benefits, will be determined by a number of factors which include but are not limited to the applicant’s experience, knowledge, skills, and abilities; geographic location; and internal equity. Why join Genpact? • Lead AI-powered transformation – Drive innovation and solve real-world business challenges that matter • Make an impact – Help global enterprises solve business challenges that matter • Accelerate your career – Gain hands-on experience, mentorship, and world-class learning opportunities to stay ahead • Work with the best – Join 140,000+ bold thinkers and problem-solvers who push boundaries every day • Thrive in a values-driven culture – Our courage, curiosity, and incisiveness - built on a foundation of integrity and inclusion - allow your ideas to fuel progress Come join the 140,000+ coders, tech shapers, and growth makers at Genpact and take your career in the only direction that matters: Up. Let’s build tomorrow together. Genpact is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. Genpact is committed to creating a dynamic work environment that values respect and integrity, customer focus, and innovation. Furthermore, please do note that Genpact does not charge fees to process job applications and applicants are not required to pay to participate in our hiring process in any other way. Examples of such scams include purchasing a 'starter kit,' paying to apply, or purchasing equipment or training. We're an agentic and advanced technology solutions company that runs mission-critical operations for the world's leading companies, while building and deploying the agentic products and technology that power those operations. Our teams bring deep expertise to shape what AI can do and change how businesses actually run. Join us to build the career you want — and be on it because you'll be in it. At Genpact, your expertise grows because you're inside the work. Whether you build AI systems or bring deep knowledge of how businesses run, you'll work on real challenges that change how the world's leading companies operate. There's a lot to learn here, and room to grow. Genpact never asks applicants to pay to be part of our hiring process. If you get an email asking you to purchase a starter kit, equipment, or training, or pay to apply for a job, please assume this is a scam.