206094 - DevSecOps

Orion Innovation
Columbus, OH, United States
13 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Working hours
Regular working hours
Job source

Tech stack

Amazon Web Services Microsoft Azure Cloud Computing Continuous Delivery Continuous Integration DevOps Github Role-Based Access Control Ansible Fortify (Software) SonarQube Tripwire
+14 more
Google Cloud DevOps Tools - Open-source Delivery Pipeline Multi-Cloud Veracode Gitlab Build Management Kubernetes Infrastructure Automation Frameworks Terraform Devsecops AWS EKS Static Application Security Testing Dynamic Application Security Testing

Job description

We are seeking a highly skilled and experienced DevSecOps Architect/Lead to lead the architecture, deployment, and configuration of DevSecOps solutions across hybrid and multi-cloud environments. The ideal candidate will have hands-on expertise in designing and implementing DevSecOps CI/CD solutions for automating end-to-end Delivery pipeline., * Architect enterprise-grade DevSecOps solutions inline with industry standards

  • Discover and assess CI/CD and IaC requirements and develop the blueprints for target architecture

  • Lead the Assessment of the current state DevOps maturity and align to industry maturity models

  • Develop ways of working for Continuous Integration and Continuous Delivery with automated DevSecOps platforms

  • Must have hands-on deep expertise in setting up CI/CD pipelines, IaC for Infrastructure provisioning, Security and Quality integrations in the pipeline, GitOps practices.

  • Design end to end CI/CD pipelines with quality and security integration

  • Implement SAST, DAST, SCA tools and integrate in the CI/CD pipeline

  • Good understanding of Azure Kubernetes and AWS Kubernetes

  • Must be able to design and architect the DevSecOps ecosystem from scratch

  • Work closely with the customer Application teams and Infrastructure teams

  • Implement reusable pipeline and IaC templates for

  • Lead the onboarding of applications on the Core DevOps platform

  • Understanding of GitOps practices using ArgoCD

  • Design the CI/CD and IaC infrastructure and create standardized blueprints and reusable components

  • Develop Golden paths for Pipeline and IaC

  • Create target architecture for enabling DevSecOps for applications and infrastructure

  • Work with Observability team for DevSecOps integration with AIOps platform

  • Design and build dashboards for end-to-end value stream visibility

  • Implement identity, RBAC, and security controls for DevSecOps tools

  • Create runbooks and SOP for application onboarding

  • Develop wave plans for Enterprise rollout of the DevSecOps platform and practices.

  • Good to have experience setting up DevSecOps Community of Practice and Centre of Excellence.

Requirements

  • Proven hands-on experience with multiple CI/CD platforms like Azure DevOps, GitHub actions, GitLab environments.

  • Strong knowledge of Azure, AWS, and GCP cloud infrastructure.

  • Experience with integration of security (SAST, DAST, SCA) tools like Trivy, Synk, SonarQube, Veracode, Fortify in the pipeline

  • Strong in IaC tools like Terraform for infrastructure provisioning (VMs, AKS, containers).

  • Strong knowledge of application onboarding at scale on the DevSecOps platform

  • Familiarity configuration management tools like Ansible for Infrastructure configurations.

  • Familiarity with GitOps tools like ArgoCD

  • Strong analytical skills and understanding of DevSecOps practices.

  • Excellent communication and documentation skills

Experience working with Application teams to develop the target state DevSecOps architecture

About the company

Orion Innovation is a premier, award-winning, global business and technology services firm. Orion delivers game-changing business transformation and product development rooted in digital strategy, experience design, and engineering, with a unique combination of agility, scale, and maturity. We work with a wide range of clients across many industries including financial services, professional services, telecommunications and media, consumer products, automotive, industrial automation, professional sports and entertainment, life sciences, ecommerce, and education.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:53 min

Transitioning toward DevSecOps with dynamic scanning and secrets management

Christoph Ruggenthaler · LIVE

6:14 min

Structuring CI/CD pipelines with integrated security and quality checks

Christoph Ruggenthaler · LIVE

2:17 min

Mapping the maturity roadmap for scaled devops adoption

Dominik Krichbaum Dominik Krichbaum · WWC Europe 2026

6:36 min

Funding open source through GitHub Accelerator and Sponsors

Stormy Peters · WWC 2023

2:30 min

Establishing shared definitions for devops and cloud architectures

Bruno Amaro Almeida · WWC 2022

4:29 min

Configuring a DevSecOps pipeline and Oversecured integration demo

Moataz Nabil Moataz Nabil · LIVE

Videos

See all

Related articles

See all