DevSecOps Architect - ELK Stack (8-10 yrs)

We are looking for an experienced DevSecOps Architect to provide architecture guidance and lead the DevOps practice for our client.

The ideal candidate should possess strong technical expertise along with the ability to provide thought leadership, drive innovation, and collaborate with stakeholders across multiple levels.

Key Responsibilities :

- Develop and maintain a comprehensive DevSecOps strategy aligned with business objectives and security requirements.

- Design and implement secure CI/CD pipelines, infrastructure-as-code (IaC), and automated security testing.

- Define and enforce security standards and best practices throughout the software development lifecycle (SDLC).

- Architect and implement cloud-native solutions, including containerization (Docker, Kubernetes), serverless computing, and microservices.

- Lead and mentor DevOps teams, providing technical guidance and support.

- Drive the adoption of DevOps principles and practices, including continuous integration, continuous delivery, and continuous monitoring.

- Establish and maintain DevOps metrics and KPIs to measure performance and identify areas for improvement.

- Promote a culture of collaboration, automation, and continuous improvement.

- Integrate security tools and processes into the CI/CD pipeline, including static application security testing (SAST), dynamic application security testing (DAST), and software composition analysis (SCA). -

- Implement security automation and orchestration to streamline security operations.

- Design and implement security monitoring and alerting systems to detect and respond to security incidents.

- Ensure compliance with security standards and regulations (ISO 27001, SOC 2, PCI DSS).

- Design and implement cloud infrastructure solutions on platforms such as AWS, Azure, or GCP.

- Automate infrastructure provisioning and configuration using IaC tools (Terraform, CloudFormation).

- Optimize cloud infrastructure for performance, scalability, and cost efficiency.

- Implement and manage container orchestration platforms (Kubernetes).

- Collaborate with development, operations, and security teams to ensure alignment and effective communication.

- Provide thought leadership and technical guidance to stakeholders at all levels.

- Communicate complex technical concepts in a clear and concise manner.

- Present architecture and security designs to technical and non-technical audiences.

- Stay up-to-date on the latest DevSecOps trends and technologies.

- Evaluate and recommend new tools and technologies to improve the DevSecOps practice.

- Drive innovation and experimentation to enhance security and efficiency.

Required Skills and Experience :

- Bachelor's degree in Computer Science, Information Technology, or a related field.

- Minimum of 8+ years of experience in DevOps and security engineering. -

- Proven experience in designing and implementing DevSecOps solutions in cloud environments (AWS, Azure, GCP).

- Strong understanding of DevOps principles, practices, and tools.

- Extensive experience with CI/CD pipelines (Jenkins, GitLab CI, Azure DevOps).

- Proficiency in IaC tools (Terraform, CloudFormation).

- Strong understanding of security concepts and best practices, including SAST, DAST, and SCA.

- Experience with containerization and orchestration technologies (Docker, Kubernetes).

- Experience with security monitoring and logging tools (e.g., Splunk, ELK stack).

- Excellent communication, collaboration, and leadership skills.

- Strong scripting skills (Python, Bash, etc).

- Deep understanding of network security concepts.

Preferred Qualifications :

- Master's degree in Computer Science, Information Security, or a related field.

- Relevant certifications (AWS Certified DevOps Engineer, Azure DevOps Engineer Expert, Certified Kubernetes Security Specialist).

- Experience with serverless computing and microservices architecture.

- Experience with security automation and orchestration tools.

- Experience with API security.