DevSecOps Architect

Role Objective:

malomatia is looking for a highly skilled and experienced DevSecOps Architect to lead and guide our internal as well as our customers DevSecOps strategy and platform, ensuring seamless integration between software development, security and IT operations. The ideal candidate will have deep expertise in DevSecOps methodologies, with a focus on designing, implementing, and optimizing scalable, high-performance solutions across cloud infrastructure, automation, orchestration, and configuration management. This role will be responsible for driving automation initiatives, as well as overseeing continuous integration, continuous delivery (CI/CD), and deployment processes, all while maintaining the highest levels of quality, security, and operational efficiency.

Role & responsibilities

DevOps Strategy & Planning

• Develop, define, and execute the organizations DevSecOps strategy in alignment with business objectives.
• Identify and implement industry best practices for DevSecOps, with a focus on continuous improvement, agile methodologies, and scalability.
• Guide and mentor development, operations, and cross-functional teams in adopting and evolving DevSecOps methodologies and processes.

Infrastructure Design & Management

• Architect and manage scalable, secure, and highly available DevSecOps platform.
• Design and implement automated solutions for infrastructure provisioning, securing, monitoring, scaling, and disaster recovery.

• Collaborate with development and operations teams to ensure seamless integration of software components with infrastructure.

Continuous Integration & Delivery (CI/CD)

• Design, implement, and optimize CI/CD pipelines to accelerate code deployment and streamline the release process.
• Drive adherence to continuous integration practices, facilitating rapid development, testing, and deployment cycles.
• Establish and maintain automated testing frameworks and quality assurance processes to ensure code reliability and consistency.

Automation & Tooling

• Identify and implement automation opportunities to eliminate manual, repetitive tasks, improving efficiency and productivity across development and operations.
• Integrate modern DevSecOps tools and technologies into the software development lifecycle, ensuring smooth and reliable operations.
• Develop and implement comprehensive monitoring and alerting systems to proactively detect, troubleshoot, and resolve issues.

Collaboration & Communication

• Foster a culture of collaboration between development, operations, and other cross-functional teams to enhance efficiency and communication.
• Provide technical leadership, mentoring, and guidance to teams, promoting knowledge sharing and continuous learning.
• Effectively communicate with key stakeholders to understand business requirements and translate them into scalable and secure technical solutions.

Security & Compliance

• Ensure infrastructure, deployment processes, and DevSecOps practices comply with industry security standards, regulatory requirements, and best practices.
• Implement security best practices across all DevSecOps components, including access control, data protection, and vulnerability management based on guidance from our Cyber Security team.
• Identify and evaluate new automation tools and technologies to close gaps in infrastructure and operations automation.
• Ensure compliance with organizational standards, customer requirements, and best practices across all aspects of the DevSecOps lifecycle.

Maintain comprehensive documentation for infrastructure configurations, deployments, and processes, ensuring transparency and audit readiness.

Preferred candidate profile

• At least 6 - 8 years relevant IT experience.
• Experience in DevSecOps, automation, Azure Resource Manager (ARM), scripting technologies such as Java Scripting, Terraform, Ansible, Python, PowerShell will be advantageous.
• Proficient in cloud platforms (e.g., Azure, Google Cloud, OCI) and containerization technologies (e.g., Docker, Kubernetes).
• Strong experience with Infrastructure as Code (IaC) tools like Terraform, Ansible, Puppet, Chef or similar.
• Solid understanding of software development methodologies and agile frameworks.
• Experience with the Testing and Delivery teams to ensure issues identified during test phase are resolved before release to Production environment using DevSecOps concepts.
• Experience and knowledge of large scale, global IT organizations preferably with System Integrators.
• Accreditations e.g. AZ-400, Terraform Associate, Docker Certified Associate, Red Hat Certified Specialist in Ansible Automation (EX407), Certified Kubernetes Administrator (CKA), Red Hat OpenShift Administrator, Python, PowerShell.

Perks and benefits