DevSecOps architect in digital banking

Tech Duck; United States; Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

Private health insurance

Career growth & training portal

Mentoring & adaptation programs

Remote and hybrid work options

Job summary

Tech Duck is seeking a DevSecOps Architect/Technical Lead to modernize digital banking architecture, boost security, scalability and platform reliability. You will translate security strategy into a practical roadmap, implement CI/CD security gates, and guide delivery teams across engineering and security functions.

Key focus areas include Azure, AKS, IaC, SBOM, artifact signing and secure promotion processes, with hands-on execution and mentoring, while enabling risk-aware automation and strong

Qualifications

• 5+ years in DevSecOps or platform security across multiple teams.
• Ability to translate strategy into concrete roadmaps and standards.
• Hands-on with Azure and security controls in CI/CD pipelines.
• Experience with container security and IaC scanning.
• Mentor engineers and guide cross-functional teams.

Responsibilities

• Translate the DevSecOps master plan into an actionable roadmap.
• Define reusable CI/CD, security and release standards.
• Lead migration to Azure DevOps and Azure Pipelines.
• Implement security gates and scanning in CI/CD pipelines.
• Configure AKS security, secret management, SBOM and artifact signing.
• Integrate security events with SIEM and monitoring.
• Establish vulnerability management, audits and incident response.
• Provide technical leadership and knowledge transfer to teams.
• Hands-on involvement in configuration, integration and troubleshooting.

Skills

DevSecOps

Cloud security

Azure

Kubernetes

IaC (Terraform)

SBOM & software supply chain

CI/CD security gates

Security automation

Vulnerability management

English (Upper-Intermediate+)

Tools

Azure DevOps

AKS / Kubernetes security

Azure Key Vault

Defender for Containers

SonarQube / Sonatype / Nexus

Gitleaks / OWASP ZAP

Terraform

SAST / SCA / DAST

SBOM tooling

Job description

Описание:

We are looking for a DevSecOps Architect / Technical Lead to join an international software development and outsourcing company and work on a project modernizing digital banking architecture and enhancing security, scalability, and platform reliability.

Задачи:

• Translating the DevSecOps master plan into a practical implementation roadmap
• Defining reusable CI/CD, security and release-management standards
• Supporting the transition from Bitbucket/Jenkins to Azure Repos and Azure Pipelines
• Implementing security scanning and release gates in CI/CD pipelines
• Configuring security controls for AKS, container images, identities and secrets
• Establishing artifact signing, SBOM generation and secure promotion processes
• Integrating platform security events with the bank’s monitoring and SIEM solutions
• Defining vulnerability-management, audit-evidence and incident-response processes
• Providing technical leadership, recommendations and knowledge transfer to delivery teams
• Participating directly in configuration, integration and troubleshooting activities

Требования:

• Experience in DevSecOps, cloud security or platform security for 5+ years
• Proven experience designing and driving DevSecOps processes, architecture, or engineering standards across multiple teams, not only implementing predefined solutions within a single project
• Experience translating high-level security or DevSecOps strategy into a practical technical roadmap, architecture decisions, standards, and implementation guidance
• Experience owning technical decisions and driving the adoption of DevSecOps practices across engineering teams
• Strong hands‑on experience with Microsoft Azure
• Hands‑on experience implementing security controls and gates across CI/CD, including several of the following: SAST, SCA, DAST, secret scanning, IaC scanning, and container scanning
• Practical experience with Kubernetes and container security, preferably AKS
• Experience with Infrastructure as Code, preferably Terraform
• Experience with identity, secrets, and certificate managementUnderstanding of software supply‑chain security practices such as SBOM, artifact signing, provenance, and secure artifact promotion
• Ability to combine architecture and technical leadership with hands‑on implementation and troubleshooting
• Experience mentoring or technically guiding engineers and working across development, platform, security, and architecture teams
• Level of English – from Upper‑Intermediate and above

Будет плюсом:

• Experience in the banking domain
• Experience with Jenkins, Bitbucket and migration to Azure DevOps
• Experience with Azure Key Vault, Azure Container Registry and Defender for Containers
• Familiarity with tools such as SonarQube, Sonatype, Nexus, Gitleaks, Checkov or OWASP ZAP
• Understanding of SBOM, artifact signing and software supply‑chain security
• Experience with DefectDojo, Microsoft Sentinel or other vulnerability‑management and SIEM solutions
• Experience with Azure Policy, Gatekeeper, OPA or Kubernetes admission controls
• Experience in banking or another regulated industry
• Understanding of DORA, audit traceability and segregation‑of‑duties requirements

Условия:

• Experience in teamwork with leaders in FinTech, Healthcare, Retail, Telecom, and others
• Andersen cooperates with such businesses as Samsung, Siemens, Johnson & Johnson, BNP Paribas, Ryanair, Mercedes, TUI, Verivox, Allianz, T-Systems, etc.
• The opportunity to change the project and/or develop expertise in an interesting business domain
• Job conditions – you can work both fully remotely and from the office or can choose a hybrid variant
• Guarantee of professional, financial, and career growth!
• The company has introduced systems of mentoring and adaptation for each new employee
• The opportunity to earn up to an additional 1,000 USD per month, depending on the level of expertise, which will be included in the annual bonus, by participating in the company's activities
• Access to the corporate training portal, where the entire knowledge base of the company is collected and which is constantly updated
• Bright corporate life (parties / pizza days / PlayStation / fruits / coffee / snacks / movies)
• Certification compensation (AWS, PMP, etc)
• Referral program
• Private health insurance and sports compensation, depending on the type of employment