DevSecOps Architect: Secure SDLC at Scale

Seminole Hard Rock Support Services; Town of Florida (NY); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Benefits package

Career site benefits

Job summary

Seminole Hard Rock Support Services seeks a DevSecOps Architect to embed security into the SDLC across cloud and on‑prem deployments. You will define secure development standards, automate security testing, and drive governance across CI/CD pipelines and infrastructure.

The role demands hands‑on coding, threat modeling, and integrated tooling to raise security ownership while enabling rapid delivery. A shift‑left mindset is essential.

Qualifications

• Experience embedding security into the software development lifecycle (S-SDLC) across CI/CD pipelines.
• Ability to design secure-by-default development frameworks and tooling.
• Hands-on ability to write production-grade code and security automation.
• Strong knowledge of cloud security, IaC, and container security practices.

Responsibilities

• Design and implement an enterprise DevSecOps architecture with automated testing and compliance in CI/CD pipelines.
• Define secure coding standards and reference architectures for development teams.
• Architect threat modeling processes to identify and mitigate risks early.
• Set security gate criteria in pipelines for production readiness.
• Lead secure SDLC governance for new apps and major changes, enabling fast delivery.
• Build secure CI/CD pipelines with SAST/DAST/SCA, IaC scanning, and secrets detection.
• Develop policy-as-code frameworks and automation to enforce security at scale.

Skills

DevSecOps

Python

Go

PowerShell

Kubernetes

CI/CD

SAST/DAST/SCA

Tools

Terraform

Ansible

CloudFormation

Docker

Job description

Seminole Hard Rock Support Services seeks a DevSecOps Architect to embed security into the SDLC across cloud and on‑prem deployments. You will define secure development standards, automate security testing, and drive governance across CI/CD pipelines and infrastructure.

The role demands hands‑on coding, threat modeling, and integrated tooling to raise security ownership while enabling rapid delivery. A shift‑left mindset is essential.