Principal DevSecOps Solutions Architect

About the Role

Key Responsibilities

• Design and implement secure, scalable solutions to address infrastructure and security requirements.
• Champion DevSecOps practices, integrating security seamlessly into the SDLC with tools like SAST/DAST solutions and Infrastructure as Code (IaC) scanning (e.g., Prisma Cloud, SonarQube).
• Identify and implement opportunities for pipeline automation and optimization, driving efficiency and speed.
• Embrace Infrastructure as Code (IaC) using tools like Terraform and Kubernetes to automate and manage multi-cloud deployments (e.g., AWS, Azure).
• Lead the containerization efforts, leveraging Docker and Helm 3 for efficient application packaging and deployment.
• Maintain a strong understanding of security concepts, including threat modeling, risk assessment, and vulnerability management.
• Proficiency in automation tools, configuration management, and CI/CD pipelines, with familiarity with tools like GitHub Actions, ArgoCD, Terraform.
• Implement state-of-the-art artifact management solutions for secure storage and distribution (e.g., Artifactory, Nexus).
• Implement and maintain robust monitoring solutions (e.g., Prometheus, Grafana) to gain insights into application and infrastructure health.
• Integrate and leverage SIEM tools (Splunk or similar) for security data analysis, threat detection, and incident response.
• Possess a strong understanding of web server configuration and management (e.g., Apache, Nginx) for performance and security.
• Possess a strong foundation in Unix/Linux administration, including scripting (Bash), user and permission management, and troubleshooting.
• Foster a collaborative environment, working closely with development, security, and operations teams.

Requirements

• Experience with Kubernetes, Docker, Terraform, Helm, Prisma Cloud, and SonarQube.
• Knowledge of security concepts such as threat modeling, risk assessment, and vulnerability management.
• Proficiency in automation tools and CI/CD pipelines, including GitHub Actions, ArgoCD, and Terraform.
• Experience with multi-cloud deployments on platforms like AWS and Microsoft Azure.
• Understanding of web server configuration and management (e.g., Apache, Nginx).
• Strong Unix/Linux administration skills, including scripting and system troubleshooting.

Nice to Have

• Experience with artifact management solutions like Artifactory or Nexus.
• Experience with monitoring tools such as Prometheus and Grafana.
• Familiarity with SIEM tools like Splunk or similar.