POSITION SUMMARY DevSecOps Architect drives the integration of security practices across the software development lifecycle (SDLC), ensuring secure, scalable and reliable application delivery. The individual will lead the organization's DevSecOps strategy, establish security automation frameworks, strengthen cloud and application security and build a culture of security ownership across Engineering, Development, QA and Operations teams. This role brings extensive experience in DevOps, cloud infrastructure, application security, CI/CD automation, infrastructure as code and security engineering, with proven leadership capabilities to drive enterprise-wide security transformation initiatives. DevSecOps Architect is responsible for embedding security into every stage of the software delivery lifecycle. PRINCIPLE JOB

RESPONSIBILITIES:
• Define and implement the organization's DevSecOps strategy, roadmap and governance framework.
• Lead and mentor DevSecOps engineers and collaborate with Development, QA, Infrastructure, Cloud and Security teams.
• Provide strategic direction and subject matter expertise for wide adoption of DevSecOps automation
• Build and maintain DevSecOps pipelines to adopt a shift-left paradigm for security testing (SCA, SAST, DAST, etc.)
• Develop and promote best practices for DevSecOps and secure CI/CD
• Help integrate security into Agile/DevOps strategy and practices by using DevSecOps principles, processes and tools
• Build automation/infrastructure as code to enforce cloud infrastructure security. You will automate security processes into CI/CD pipeline
• Design, implement and manage secure CI/CD pipelines with automated security checks and controls.
• Integrate security testing tools into build, deployment and release workflows.
• Implement automated code scanning, dependency scanning, container security and infrastructure security assessments.
• Establish processes for identifying, prioritizing, tracking and remediating security vulnerabilities.
• Drive threat modeling,



security architecture reviews and application security assessments.
• Leverage Security Solution Architecture standards and frameworks to provide security guidance to the business partners and project teams from a specific business segment with goals of maturing and improving the overall security posture of the segment and cultivating a segment-wide culture of security–awareness
• Responsible for establishing current and long-term direction aiming at driving to the forefront of change to a DevSecOps culture
• Coordinate DevOps security to assist the engineering teams in delivering secure infrastructure solutions with his/her security recommendations and requirements
• Perform and participate in technical vulnerability assessments of systems currently in place in addition to security evaluations
• Participate in implementation or deployment of new tools, processes and best practices to improve knowledge sharing and to raise security level while promoting security awareness
• Establish secure cloud architecture and configuration management practices.
• Implement Infrastructure as Code (IaC) security using tools such as Terraform, CloudFormation and Ansible.
• Lead security incident investigations related to application and infrastructure vulnerabilities.
• Drive risk assessments and security reviews for applications, infrastructure and third-party integrations.
• Identify opportunities to automate repetitive security activities and improve engineering productivity.
• Drive adoption of DevSecOps tools, platforms and emerging security technologies.
• Evaluate new tools and technologies to enhance application, cloud and infrastructure security. Education & Experience




• Bachelor’s or Master’s degree in Computer Science, Engineering, Information Technology, or a related discipline.
• 12–16 years of experience in DevOps, DevSecOps, Cloud Security, Application Security, or Information Security.
• Minimum 5 years of experience in leading DevOps, DevSecOps, or Security Engineering teams.
• Solid experience designing and implementing enterprise-scale CI/CD pipelines.
• Strong understanding of application security, secure SDLC, vulnerability management and threat modeling.
• Experience implementing DevSecOps practices in large-scale enterprise product engineering environments.
• Knowledge of OWASP Top 10, OWASP SAMM, NIST SSDF and secure software supply chain practices.
• Strong knowledge of containerization, Docker, Kubernetes and microservices security. Technical Skills and Tools
• Experience with CI/CD tools such as GitLab, Jenkins, Nexus, Artifactory
• Demonstrated skill with at least one or more configuration management/scripting technologies such as Ansible, Chef, Puppet
• Experience with Linux Containers (Docker), Kubernetes and deployment of containerized applications/microservices architectures
• Experience in Information Security, Networking or Security Risk Management
• Conduct research and evaluate new DevSecOps platforms, components, tools and processes for new projects and ongoing initiatives
• Hands-on experience in implementing security controls and agile, DevOps & DevSecOps delivery methodologies
• Application Security: SonarQube, Checkmarx, Veracode, Fortify, Snyk, OWASP ZAP, Burp Suite.
• Container Security: Docker, Kubernetes, Aqua Security, Trivy, Twistlock/Prisma Cloud.
• Monitoring and Logging: Splunk, ELK Stack, Prometheus, Grafana, Datadog.
• Version Control: Git, GitHub, GitLab, Bitbucket. Certifications
• Relevant certifications such as AWS Security Specialty, Certified Kubernetes Security Specialist (CKS), CISSP, CSSLP, or equivalent.

📌 DevSecOps Architect (Bengaluru)
🏢 ZeOmega
📍 Bengaluru