Devsecops Architect

Relevant Experience: 10+ years Job Location: Mumbai (WFO) Duration: 3 Months Rate: Open for right candidate, based on profile we will negotiate. Job Description Scope of Work Define DevOps Tech Stack Define overall DevOps strategy and workflow from PR to Production Define Branching Strategy Define containers strategy and docker template to be used across all backend micro services CI Pipeline Configuration Task: Setup the Continuous Integration pipeline to automate the building, testing, and code quality checks of the codebase on each commit or pull request Task: On the fly creation of dynamic environment for isolated/ independent micro service testing Task: Integration with Teams/ Slack for updates Artifact Repository Setup Task: Integrate an artefact repository to store and manage versioned build artefacts resulting from CI processes mostly Docker Registry Task: Create cost efficient policy to retain historical images Task: Come up with tagging strategy, using naming conventions, versioning etc Implement Pull Request Policies Task: Use following gates with expected criteria on each PR 1. Unit tests 2. Contract tests 3. API tests 4. Sonar Qube code scan 5. Code coverage(above x%) 6. Security Scan (optional) 8. Manual code review ( x mandatory reviews) Implement Pull Request Policy for "Contracts" repos Task: Use following gates with expected criteria on each PR 1. Spectral Style Check 2. Specmatic Backward Compatibility Check 3. Manual code review ( x mandatory reviews) Implement Centralised Logging Framework Task: Integrate a centralised logging system that aggregates logs from all micro services Task: Single click deployment as part of observability(o11y) stack Configuration Management Task: Implement configuration management tool Task: Single click deployment Setup Monitoring and Alerting Task: Deploy monitoring tools to track the health, performance, and availability of micro services. Configure alerts for anomalies Task: Single click deployment as part of observability(o11y) stack Dashboards for Real-time Visibility Task: Create dashboards to visualize key metrics, logs, and traces for operational insight Task: Single click deployment as part of observability(o11y) stack Implement Centralised Secrets Management Task: Integrate a centralised secrets management system to host the secrets like usr/ pwd, certificates, encryption keys etc Task: Single click deployment Implement Feature Toggle System Task: Integrate a feature toggle framework to manage and toggle features in real-time without deploying new code. Task: Single click deployment Configure Continuous Deployment (CD) Pipeline Task: Automate deployment process to various environments (dynamic for PR, EAT, SIT, UAT, Prod) with approval gates Infrastructure as Code (IaC) Implementation Task: Adopt an IaC approach to automate the provisioning and management of all cloud resources and environments Environment Segregation Task: Define and set up separate environments for CI, DEV, SIT, UAT, Prod to ensure isolation and independent scaling. Networking Setup Task: Configure networking resources including VPCs, subnets, and routing rules to ensure secure and efficient communication between microservices and external access Task: Articulate deployment diagram for application Environment Monitoring and Backup Task: Set up monitoring for each environments health and performance. Implement backup strategies and disaster recovery plans Access Control and Security Task: Define access control policies for team members across different environments. Implement security groups, firewalls, and encryption to protect resources and data. Setup Environment-specific Toggles Task: Configure feature toggles to work differently across various environments (e.g., enable in dev but disable in prod) Monitoring and Logging for Feature Toggles Task: Ensure that feature toggle changes are logged and monitored for impacts on system performance and user experience Feature Toggle Cleanup Policy Task: Establish a process for removing or permanent enabling features controlled by toggles after a certain period Promote Builds Across Environments Task: Set up a promotion process for moving successful builds through environments towards production Pipeline Optimisation Task: Continuously monitor and optimise pipeline processes for cost, speed, efficiency, and reliability Security Integrations Task: Implement security scanning and compliance checks within the CI/CD pipelines Documentation (not separate story but part of acceptance criteria for all the DevOps work) Task: Document the setup, configuration, and usage instructions for each environment, including CI/CD processes with run books