DevSecOps Architect

$145,600 - $166,400/Yr

Perma Technologies

Full-time - Senior

About the position

The DevSecOps Architect role at Perma Technologies involves advanced DevSecOps work within a cross-functional team, focusing on integrating security measures into DevOps processes. The position requires hands-on experience in software development, cybersecurity, and IT operations, with a strong emphasis on building, testing, and deploying secure applications using CI/CD pipelines in a large-scale enterprise environment. The architect will be responsible for automating security controls, monitoring for vulnerabilities, and providing training on secure coding practices.

Responsibilities

• Integrate security measures into DevOps processes and automate security controls in CI/CD pipelines.
• Monitor applications and infrastructure for security vulnerabilities and conduct regular security assessments.
• Provide training on secure coding practices and stay updated on new security technologies.
• Develop and maintain CI/CD pipelines, automating the building, testing, and deployment of software applications.
• Collaborate with software engineers, operations staff, security teams, and testers to implement 'shift left' security measures.
• Design, test, and implement secure software development practices and standards in CI/CD pipelines.
• Continuously monitor applications and infrastructure for security vulnerabilities and performance issues.
• Conduct regular security assessments, audits, and compliance checks to ensure adherence to security standards.
• Document and communicate security procedures and policies in alignment with the Information Security Office.

Requirements

• 11+ years of experience in software development, cybersecurity, and/or IT operations.
• Strong hands-on experience with CI/CD pipelines and DevOps tools such as Ansible, Jenkins, Maven, and Docker.
• Expertise in cloud architecture, Kubernetes, and microservices.
• Proficiency in scripting languages such as Bash, Python, and PowerShell.
• Knowledge of information security frameworks and standards such as NIST and OWASP Top 10.
• Strong understanding of Linux administration and vulnerability management.

Nice-to-haves

• Experience with Git and version control software.
• Familiarity with security assessment tools like Checkmarx and SonarQube.
• Strong problem-solving skills and ability to multi-task.

Benefits

• Health insurance
• Dental insurance
• 401(k)