DevOps Lead Architect - i3 Consulting

OpenTalent; Baltimore (MD); On-site; USD 150,000 - 230,000; Full time

Job summary

OpenTalent is seeking a Senior DevOps Architect to lead the design and implementation of scalable, secure cloud infrastructure across AWS and Kubernetes. You will drive IaC practices, CI/CD maturity, and platform governance while mentoring engineering teams.

You will partner with security, SRE, and development teams to enforce policies, optimize costs, and deliver reliable, observable software delivery pipelines using CloudBees Core, Datadog, and Artifactory.

Qualifications

• 8+ years in DevOps/Cloud Engineering with at least 3+ years in a lead/architectural capacity.
• Proven ability to design scalable, secure multi-account AWS environments and drive IaC adoption.

Responsibilities

• Design and maintain scalable, secure AWS environments using modular IaC (Terraform/CloudFormation).
• Lead enterprise CI/CD pipelines and CloudBees Core operations with HA setups and RBAC.
• Hardening Kubernetes clusters, managing Helm deployments, and enforcing runtime security policies.
• Oversee artifact governance (Artifactory, Xray) and vulnerability scanning.
• Drive observability architecture with Datadog/New Relic across AWS and Kubernetes.
• Provide technical leadership and mentorship to engineering teams and ARB participation.

Skills

AWS Architecture & IaC

Enterprise CI/CD (CloudBees Core)

Kubernetes Orchestration & Security

Artifact & Package Governance

Full-Stack Observability & APM

DevSecOps Integration

Technical Leadership & Mentorship

AWS & IaC Mastery

CloudBees Core Expertise

Kubernetes Production Experience

Artifact Management

Observability Tools

Scripting & Automation

AWS Certifications (Pro/Sec)

Tools

Terraform

CloudFormation

CloudBees Core

Kubernetes (kubectl, etc)

JFrog Artifactory

JFrog Xray

Datadog

New Relic

Helm

HashiCorp Vault

Trivy

Job description

• AWS Architecture & IaC: Architect and maintain scalable, resilient, and secure multi-account AWS environments using modular Infrastructure as Code (Terraform or CloudFormation), enforcing drift detection and automated state management.
• Enterprise CI/CD (CloudBees Core): Design, deploy, and administer CloudBees Core (Operations Center, managed controllers, high availability, role-based access control, and Groovy-based Shared Libraries) with dynamic build agents hosted on Kubernetes.
• Kubernetes Orchestration & Security: Design, scale, and harden enterprise Kubernetes clusters (EKS or self-managed); manage Helm deployments, ingress controllers, service meshes, and enforce runtime security policies (OPA/Gatekeeper or Kyverno).
• Artifact & Package Governance: Oversee enterprise binary management using JFrog Artifactory, configuring promotion pipelines, virtual/remote repositories, caching policies, and automated vulnerability scanning with JFrog Xray.
• Full-Stack Observability & APM: Architect enterprise monitoring, logging, and tracing using Datadog or New Relic—deploying daemonsets, APM tracing, custom metrics, SLI/SLO dashboards, and proactive alerting across AWS and Kubernetes layers.
• DevSecOps Integration: Embed shift-left security practices directly into CloudBees Core pipelines, integrating SAST, DAST, container scanning (Trivy, JFrog Xray), and centralized secrets management (HashiCorp Vault or AWS Secrets Manager).
• Technical Leadership & Mentorship: Lead and coach engineering teams, define infrastructure standards, establish code review guidelines, and lead architectural review boards (ARB).
• Experience: 8+ years in DevOps/Cloud Engineering with at least 3+ years in a lead or architectural capacity leading hands‑on implementations.
• AWS & IaC Mastery: Deep hands‑on expertise with core AWS services (IAM, VPC, EKS, RDS, S3, Route53, KMS) provisioned strictly via Terraform or CloudFormation.
• CloudBees Core Expertise: Demonstrated proficiency architecting and operating CloudBees Core, including Operations Center management, cross-controller configurations, pipeline templates, and distributed agent scaling.
• Kubernetes Production Experience: Strong hands‑on background managing production Kubernetes clusters, cluster networking (CNI), storage classes (CSI), container lifecycle management, and Helm charting.
• Artifact Management: Advanced administration of JFrog Artifactory, repository lifecycle management, and supply chain security (SBOMs, signed images).
• Observability Tools: Hands‑on experience configuring and maintaining Datadog or New Relic for APM, infrastructure metrics, log aggregation, and synthetic monitoring.
• Scripting & Automation: Strong coding and scripting skills in Python, Groovy (for Jenkins pipelines), Bash, or Go.
• AWS Certified Solutions Architect – Professional / AWS Certified DevOps Engineer – Professional