Sr. Solutions Architect - DevSecOps

$130,000 - $150,000/Yr

Latitude

Full-time - Senior

Real Estate

About the position

We are looking for a highly skilled Solutions Architect specializing in DevSecOps to lead the design, implementation, and optimization of secure, scalable, and reliable cloud and on-premise solutions. This role requires deep expertise in DevOps practices and security integration, with a focus on embedding security throughout the software development lifecycle.

Responsibilities

• Architect secure, scalable, and resilient infrastructure solutions that integrate security into DevOps pipelines (CI/CD).
• Design cloud-native solutions on platforms such as AWS, Azure, or Google Cloud with security-first principles.
• Evaluate and recommend tools and frameworks for automating security practices within the development lifecycle.
• Lead the implementation of security controls and practices throughout the software development lifecycle.
• Develop and manage automated security testing and monitoring tools (e.g., SAST, DAST, vulnerability scanning).
• Establish security guardrails and integrate them into CI/CD pipelines to detect and mitigate security risks early in the development process.
• Collaborate with development, operations, and security teams to design, build, and manage highly secure DevOps workflows.
• Provide technical leadership and mentorship to DevOps engineers, software developers, and security teams on best practices for integrating security into agile development.
• Work with stakeholders to gather and define business and technical requirements for DevSecOps initiatives.
• Ensure infrastructure and applications comply with security standards and regulations such as NIST, ISO, SOC 2, and HIPAA.
• Develop and maintain security architecture documentation and ensure systems are compliant with corporate policies and industry standards.
• Conduct risk assessments and lead efforts to mitigate vulnerabilities and potential threats in DevOps processes.
• Develop automation scripts for infrastructure provisioning, security policies enforcement, and monitoring using Infrastructure as Code (IaC) tools.
• Continuously improve the security, performance, and scalability of existing DevSecOps workflows and infrastructure.
• Proactively monitor and address potential security risks and recommend improvements to security posture and automation capabilities.
• Implement robust security monitoring and alerting mechanisms, integrating tools like SIEM, IDS/IPS, and cloud-native security tools.
• Lead incident response efforts related to security vulnerabilities and provide post-mortem analysis and recommendations for preventing future occurrences.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or related field (Master's degree preferred).
• 10+ years of experience in architecture or engineering roles with a focus on DevSecOps.
• Strong expertise in DevOps tools and technologies (Jenkins, GitLab, Kubernetes, Docker, etc.).
• Extensive experience with security practices, including vulnerability management, encryption, authentication, and secure coding practices.
• Knowledge of cloud platforms (AWS, Azure, GCP) and Infrastructure as Code (IaC) tools (Terraform, CloudFormation).
• Experience implementing security tools within CI/CD pipelines (e.g., static code analysis, container security).

Benefits

• Competitive salary ranging from $130,000 to $150,000 per year.