DevSecOps Architect (Infra Security) IAM, HA/DR, IaC, CI/CD 12 Mths Cont NYC

Zen & Art; New York (NY); Hybrid; USD 170,000 - 210,000; Full time

Job summary

Zen & Art in NYC seeks a Senior Multi-Cloud Infrastructure and Security Architect to lead secure cloud design and implementation across AWS and Azure, with emphasis on IAM, HA/DR, IaC, CI/CD, and hybrid connectivity.

The role functions as a technical SME to the Cyber Security team, translating security requirements into scalable cloud configurations and driving collaboration with on-prem teams to migrate workloads with minimal disruption.

Qualifications

• Minimum 8+ years of IT infrastructure experience in large-scale enterprises.
• Hands-on production experience with at least two major cloud vendors (AWS/Azure).
• Strong networking, IAM, and security controls knowledge.
• Proficient in automation and IaC tooling.
• Scripting in Python/Shell and Unix/Linux familiarity.

Responsibilities

• Design and implement secure, enterprise-grade multi-cloud infrastructure across AWS and Azure.
• Establish scalable IAM hierarchies and cross-account trust across cloud tenants.
• Create and test automated failover and disaster recovery for critical workloads.
• Develop CI/CD pipelines with security guardrails (Jenkins, GitHub Actions).
• Collaborate with on-prem teams to migrate workloads to cloud without downtime.

Skills

Multi-Cloud Architecture

IAM & Security

Automation & IaC

Python / Scripting

Unix/Linux proficiency

Networking fundamentals

Tools

AWS

Azure

Google Cloud Platform

Jenkins

GitHub Actions

Terraform

Job description

DevSecOps ARCHITECT (Multi Cloud -Infra Security) IAM, HA/DR, IaC, CI/CD, Jenkins, GitHub 12+ Mths Cont NYC

Job id: JPC 3597

Level : Level 4 (8+ Yrs of Exp)

Location: NYC(Onsite- 3 days a week, Hybrid Role)

Interview Type: Final Round Inperson, only locals

Duration: 12 months +

Title

Description:

About The Role And Our Mission

The Enterprise Email Security team is responsible for safeguarding the email communications for a complex global organization. Although the current team excels in platform architecture, threat mitigation, incident response, compliance, and governance, we are planning a significant transformation of our infrastructure. This initiative involves expanding from a legacy on-premises environment to a robust, multi-cloud ecosystem across leading global cloud service providers.

While the organization possesses deep security expertise, there is a need for a highly skilled professional in cloud architecture and enterprise IT infrastructure to design and implement secure and resilient cloud solutions.

The company is seeking a Senior Multi-Cloud Infrastructure and Security Architect for a full-time contractor role 40 hrs a week. This individual will serve as a technical leader, translating high-level security requirements into practical, scalable cloud engineering solutions. The role is critical to ensuring the organization's systems are robust, resilient, and highly available.

Key Responsibilities

• Hybrid & Multi-Cloud Architecture Design


• Architect and implement secure, enterprise-grade multi-cloud infrastructure across AWS and Azure (Google Cloud Platform is a plus), ensuring alignment with benchmarks and corporate security policies.


• Adopt complex hybrid connectivity solutions to link on-premise and cloud based systems.


• Establish scalable IAM hierarchies, cross-account trust relationships, and organizational units across multiple cloud tenants.


• Infrastructure Resiliency & Disaster Recovery (DR)


• Architect high-availability (HA) and disaster recovery topologies across disparate cloud providers to eliminate single points of failure (e.g., active-active cross-cloud replication).


• Develop, document, and test automated failover mechanisms for critical enterprise workloads to ensure zero-downtime objectives.


• Infrastructure as Code (IaC) & Automation


• Define, build, and maintain the IaC repository using automation platforms.


• Implement secure CI/CD deployment pipelines (Jenkins, GitHub Actions) embedded with automated security guardrails and static analysis tools.


• Technical Advisory & Collaboration


• Serve as the primary subject matter expert (SME) on cloud infrastructure for the core Cyber Security team, translating security objectives into concrete cloud configurations.


• Collaborate with traditional on-prem network and sysadmin teams to systematically migrate or extend legacy workloads to the cloud without disrupting active operations.
  

Required Skills & Experience

Enterprise Scale: Minimum 8+ years of experience managing, architecture-designing, and deploying IT infrastructure within a Fortune 500 or equivalent large-scale enterprise.

Multi-Cloud Mastery: Deep, hands-on production experience with at least two major cloud vendors (AWS and Azure are highly preferred). You know their native networking, identity systems, and edge security controls inside out.

Networking: Strong foundational background in traditional on-premises networking (firewalls, load balancers, VLANs, proxies) and how those concepts map directly to cloud-native constructs (VPCs, VNets, Transit Gateways).

Automation-First Mindset: Advanced proficiency with automation toolsets.

Pragmatic Security Knowledge: While you don't need to be a penetration tester, you must thoroughly understand cloud security frameworks and modern identity protocols.

Scripting & Systems Proficiency: Strong proficiency with Python programming, Shell s scripting, and Unix/Linux operating systems.

Desired Certifications

• AWS Certified Solutions Architect Professional / AWS Certified Security Specialty


• Microsoft Certified: Azure Solutions Architect Expert / Azure Security Engineer Associate


• CCSP (Certified Cloud Security Professional) or equivalent infrastructure-focused certifications

Preferred / Plus Qualifications

• Familiarity with Secure Email Gateway (SEG) products such as Proofpoint and Fortimail


• Familiarity with Exchange-Online security products such as Sublime security and Abnormal Email Security


• Experience with large scale email broadcast or bulk messaging platforms


• Exposure to compliance frameworks, audits, and regulatory examinations


• Experience integrating email platforms with monitoring, logging, and AIOps tooling


• Prior experience mentoring senior or mid level engineers
  

Key Attributes

• Ability to work independently on complex, ambiguous problems


• Strong analytical and troubleshooting skills


• Excellent written and verbal communication skills


• Self driven learner with curiosity for modern tooling and AI assisted development


• Collaborative mindset with the ability to influence across teams and functions
  

Why Join Us

• Work on mission critical, globally distributed email security platforms


• Solve complex security and compliance challenges at enterprise scale


• Collaborate with highly skilled engineers in a strong engineering culture


• Opportunity to shape the long term evolution of enterprise email security architecture