DevOps Architect

Quantum Technologies. LLC; Texas; On-site; USD 120,000 - 190,000; Full time

Job summary

Quantum Technologies. LLC is seeking a Senior DevSecOps Lead to design and implement security-enabled CI/CD pipelines across our software platforms. You’ll integrate SAST/DAST/SCA tooling, secure coding practices, and threat modeling to reduce risk while speeding releases.

You will architect secure software supply chain processes, manage SBOMs (CycloneDX/SPDX), and drive automation with IaC and container security in cloud-native environments.

Qualifications

• Experience designing DevSecOps in CI/CD pipelines.
• Hands-on experience with SAST/DAST/SCA tools.
• Knowledge of container security and cloud-native security.
• Familiarity with SBOM standards (CycloneDX, SPDX).
• Proficiency in secure coding principles and threat modeling.

Responsibilities

• Design and implement DevSecOps frameworks in CI/CD pipelines.
• Define and enforce application security controls (SAST/DAST/SCA).
• Architect solutions for software supply chain security (SBOM, dependency scanning).
• Integrate security tools with build systems, registries, and orchestration platforms.

Skills

CI/CD Tools

SAST/DAST/SCA

Container Security

SBOM Standards

Secure Coding & Threat Modeling

Automation Scripting

Infrastructure as Code

Compliance & Regulatory Knowledge

Cloud-native Security

Tools

Jenkins

GitHub Actions

GitLab CI

Azure DevOps

SonarQube

Checkmarx

Veracode

Snyk

Docker

Kubernetes

CycloneDX

SPDX

Terraform

Ansible

Job description

Key Responsibilities

Design and implement DevSecOps frameworks integrating security into CI/CD pipelines.

Define and enforce application security controls including:

• SAST (Static Application Security Testing)
• DAST (Dynamic Application Security Testing)
• SCA (Software Composition Analysis)

Architect solutions for software supply chain security, including:

• Dependency scanning
• SBOM (Software Bill of Materials) management
• Vulnerability remediation workflows

Integrate security tools with build systems, container registries, and orchestration platforms.

• Collaborate with development, operations, and security teams to embed security early in SDLC.
• Define risk-based prioritization and remediation strategies for vulnerabilities.
• Drive automation of security checks to reduce manual overhead and improve release velocity.

Ensure compliance with industry standards (e.g., OWASP, NIST, CIS benchmarks).

• Provide technical leadership and guidance onemerging DevSecOps trends and best practices.

Required Skills

• Strong expertise in CI/CD tools (Jenkins, GitHub Actions, GitLab CI, Azure DevOps).
• Hands-on experience with SAST, DAST, SCA tools (e.g., SonarQube, Checkmarx, Veracode, Snyk).
• Knowledge of container security (Docker, Kubernetes) and cloud-native security.
• Familiarity with SBOM standards (CycloneDX, SPDX) and supply chain risk mitigation.
• Proficiency in secure coding principles and threat modeling.
• Experience with automation scripting (Python, Bash) and Infrastructure as Code (Terraform, Ansible
• Strong understanding of compliance frameworks and regulatory requirements.

Preferred Qualifications

• .Certifications: CSSLP, CKA, AWS/Azure Security Specialty.
• Experience in microservices architecture and API security.

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.