Lead DevSecOps Architect - Secure CI/CD & Cloud

SAVIS GROUP; Mississippi; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Bonuses

Training & certification

BFSI domain knowledge

Job summary

SAVIS GROUP is seeking a seasoned DevSecOps leader to run a team of DevSecOps and SRE engineers. You will architect secure CI/CD pipelines, own IaC standards, and manage multi-cloud environments with BFSI-grade reliability.

You will drive GitOps adoption, enforce access controls, and collaborate with InfoSec to embed security across the SDLC. Ideal candidates have 8+ years in DevSecOps, 3+ in leadership, and strong cloud certs plus experience in regulated industries.

Qualifications

• Bachelor’s degree in computer science, engineering or equivalent.
• 8+ years in DevSecOps/infrastructure roles, 3+ in leadership.
• Strong knowledge of CI/CD tooling (Jenkins, GitLab CI, GitHub Actions).
• Proficiency with Terraform, Ansible, Helm, Kubernetes.
• Cloud certifications in AWS, Azure or GCP preferred.
• BFSI or regulated-industry experience preferred.
• Experience with vault/secrets management tools.
• Familiarity with secure SDLC, SAST/DAST tools.
• Excellent written and verbal communication skills.

Responsibilities

• Lead the DevSecOps function with a team of DevSecOps and SREs.
• Architect and implement CI/CD pipelines for secure delivery.
• Own IaC standards across Terraform, Ansible, etc.
• Manage cloud environments (AWS/Azure/GCP) with high reliability.
• Containerize apps and orchestrate with Kubernetes (EKS/AKS/GKE).
• Define access control, secrets management, and isolation.
• Ensure PCI-DSS, ISO 27001, RBI compliance.
• Drive observability and incident response (Grafana, ELK, Prometheus).
• Collaborate with InfoSec and risk teams in SDLC integration.
• Capaciy planning and cost optimization for cloud infra.
• Promote GitOps and policy-as-code (ArgoCD, OPA, Sentinel).
• Build runbooks and disaster recovery strategies for BFSI workloads.

Skills

CI/CD tooling

Jenkins

GitLab CI

GitHub Actions

Terraform

Ansible

Kubernetes

AWS

Azure

GCP

Secrets management

SAST/DAST

Communication

Education

Bachelor’s degree in CS/Engineering

Tools

Vault

AWS Secrets Manager

Helm

Terraform

Kubernetes

Job description

Number: 01

Application deadline: 15/5/2026

Salary: Negotiable

Working location: Duy Tan, Cau Giay, Hanoi.

• Lead the DevSecOps function, managing a team of DevSecOps and Site Reliability Engineers.
• Architect and implement CI/CD pipelines optimized for secure, compliant delivery.
• Own Infrastructure as Code (IaC) standards across Terraform, Ansible, or similar tools.
• Manage cloud environments (AWS/Azure/GCP) with BFSI-grade reliability and controls.
• Containerize applications and manage orchestration via Kubernetes (EKS, AKS, GKE).
• Define and enforce access control, secrets management, and environment isolation.
• Ensure compliance with regulatory frameworks (e.g., PCI-DSS, ISO 27001, RBI Guidelines).
• Lead efforts in observability, monitoring, and incident response (Grafana, ELK, Prometheus).
• Collaborate with InfoSec and risk teams to integrate DevSecOps in the SDLC.
• Perform capacity planning and cost optimization for cloud infrastructure.
• Drive adoption of GitOps and policy-as-code tools (e.g., ArgoCD, OPA, HashiCorp Sentinel).
• Build runbooks and disaster recovery strategies for critical BFSI workloads.
  
  

Number: 01

Application deadline: 15/5/2026

Salary: Negotiable

Working location: Duy Tan, Cau Giay, Hanoi.

Key Responsibilities

• Lead the DevSecOps function, managing a team of DevSecOps and Site Reliability Engineers.
• Architect and implement CI/CD pipelines optimized for secure, compliant delivery.
• Own Infrastructure as Code (IaC) standards across Terraform, Ansible, or similar tools.
• Manage cloud environments (AWS/Azure/GCP) with BFSI-grade reliability and controls.
• Containerize applications and manage orchestration via Kubernetes (EKS, AKS, GKE).
• Define and enforce access control, secrets management, and environment isolation.
• Ensure compliance with regulatory frameworks (e.g., PCI-DSS, ISO 27001, RBI Guidelines).
• Lead efforts in observability, monitoring, and incident response (Grafana, ELK, Prometheus).
• Collaborate with InfoSec and risk teams to integrate DevSecOps in the SDLC.
• Perform capacity planning and cost optimization for cloud infrastructure.
• Drive adoption of GitOps and policy-as-code tools (e.g., ArgoCD, OPA, HashiCorp Sentinel).
• Build runbooks and disaster recovery strategies for critical BFSI workloads.
  
  

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or equivalent.
• 8+ years in DevSecOps/Infrastructure roles, 3+ years in a leadership role.
• Strong knowledge of CI/CD tooling (Jenkins, GitLab CI, GitHub Actions).
• Proficiency with Terraform, Ansible, Helm, Kubernetes.
• Cloud certifications in AWS, Azure, or GCP preferred.
• BFSI or regulated-industry experience is highly preferred.
• Experience with secrets management tools (Vault, AWS Secrets Manager).
• Familiarity with secure SDLC, static/dynamic analysis, SAST/DAST tools.
• Excellent written and verbal communication skills; able to interact with technical and business stakeholders.
  
  

Nice to have

• Knowledge of service mesh technologies (Istio, Linkerd).
• Experience in implementing observability as code.
• Working knowledge of zero-trust network models.
• Experience with Kafka, Redis, or other high-performance back-end tech.
• Strong documentation and reporting background.
  
  

What We Offer

• Work with cutting-edge Technology products.
• Opportunity to influence DevSecOps strategy across BFSI platforms.
• Competitive salary, performance-linked bonuses.
• Access to training, certifications, and BFSI domain knowledge.
  
  

Thời gian làm việc: Từ thứ 2 – hết sáng thứ 7: 8h00-12h00, 13h30-17h30

Thông Tin Liên Hệ

– Email: [e-mail]; tiêu đề ghi rõ vị trí ứng tuyển.

– SĐT: [phone] (Ms Thuy)

– Địa chỉ: Tầng 9 tòa nhà Việt Á, số 9 Duy Tân, Dịch Vọng Hậu, Cầu Giấy, Hà Nội