Description

You will design and own the DevSecOps platform architecture, CI/CD pipelines, and developer experience tooling.

This role is on-site.

Responsibilities

• Architect cloud-native platforms using Kubernetes, Terraform, and major cloud providers (AWS, Azure, GCP).
• Integrate security tooling including SAST, SCA, container scanning, secrets detection, and DAST.
• Implement policy-as-code frameworks (OPA/Rego, Kyverno) and secure-by-design development practices.
• Secure the software supply chain using SBOM, artifact signing, and SLSA frameworks.
• Evaluate and integrate developer tooling, including AI-assisted coding platforms and automation workflows.

Required Skills

• 5+ years of hands-on experience in DevSecOps platform architecture and CI/CD pipeline design.
• Expertise in Kubernetes, Terraform, and cloud providers (AWS, Azure, or GCP).
• Strong experience with CI/CD platforms: GitHub Actions, GitLab CI, Jenkins, ArgoCD, or Tekton.
• Knowledge of security tooling integration (SAST, SCA, container scanning, secrets detection, DAST).
• Proficiency in policy-as-code frameworks such as OPA/Rego or Kyverno.
• Experience with software supply chain security (SBOM, artifact signing, SLSA).
• Bachelor's degree in Computer Science or related field.

Preferred Skills

• Familiarity with internal developer platforms (Backstage) or equivalent developer portals.
• Experience evaluating AI-assisted coding platforms and automation workflows.

Key Skills

Education

Bachelor's degree