> Markdown version of [/jobs/ext/4690677-software-engineering-architect](https://www.wearedevelopers.com/jobs/ext/4690677-software-engineering-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Software Engineering Architect

- **Company:** Cisco Systems, Inc.
- **Location:** Durham, NC, United States
- **Experience:** Expert
- **Salary:** $139,300 - $250,900
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Bash Shell, Cloud Computing, Cloud Engineering, Databases, Continuous Integration, DevOps, Disaster Recovery, Middleware, Federal Information Processing Standards (FIPS), Github, Identity and Access Management, Python (Programming Language), Key Management, Octopus Deploy, Reliability Engineering, Prometheus, Software Engineering, Policy as Code, SSL Certificate Management, Delivery Pipeline, Grafana, Kubernetes Helm Charts, Multi-Cloud, Amazon Virtual Private Cloud (VPC), Gitlab, Kubernetes, Hashicorp, Database Replication, Api Design, Terraform, Splunk, AWS EKS, Docker, Microservices
- **Published:** November 12, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=a95aa98ad90bdfd3

## About the Role

* Foundational Experience: 8+ years in DevOps, SRE, or Cloud Engineering, supported by a degree in a technical field or practical experience.
 * Secrets& Cryptography: Hands-on experience deploying and leading HashiCorp Vault at scale (Raft, replication, disaster recovery).
 * Cloud Proficiency: Deep knowledge of AWS (EKS, IAM, KMS, VPC) and Kubernetes orchestration.
 * IaC Mastery: Experience building modular, reusable Terraform/Terragrunt environments and robust CI/CD pipelines (GitLab, GitHub Actions).
 * Automation: Proficiency in Go, Python, or Bash to compose operational tooling and API-driven automation.
 * Operational Mindset: Experience supporting 24x7 production environments and leading incident responses with a blameless, growth-oriented perspective.

Why You'll Stand Out

 * Compliance Expertise: Experience operating in regulated environments like FedRAMP, SOC 2, or ISO 27001.
 * Security Integration: Knowledge of HSMs (CloudHSM, Thales Luna) and certificate management (ACME, EST, SCEP).
 * Policy-as-Code: Familiarity with OPA, Kyverno, or HashiCorp Sentinel.
 * Data& Database Ops: Exposure to enterprise database replication or complex middleware tiers.

## Description

* Enterprise Secrets Management: A centralized service built on Vault Enterprise, safeguarding credentials and encryption keys across multi-cloud and high-compliance boundaries (including FedRAMP and DoD IL5).
 * Private PKI& CA Platform: A high-assurance, automated certificate lifecycle service on AWS EKS that secures internal microservices, cloud applications, and global supply chains.

What You'll Do (Your Impact)

As a Senior DevOps Engineer, you will blend platform engineering, cloud architecture, and Site Reliability Engineering (SRE) to build resilient infrastructure.

 * Architect and Scale: Drive the reliability and scalability of Vault clusters and containerized CA workloads across diverse environments (FedRAMP, IL5, and commercial).
 * Modernize Infrastructure: Build our GitOps future by maintaining modular Terraform/Terragrunt, Helm charts, and Argo CD Application Sets.
 * Automate Lifecycles: Lead zero-downtime upgrades and image pipelines (Packer/Docker) that integrate seamlessly with CI/CD and incident response workflows.
 * Enable Tenants: Build scalable isolation models that allow business units to migrate legacy cryptographic workloads to our modern, automated platforms.
 * Champion Compliance: Implement"Policy-as-Cod" (Sentinel, OPA) and ensure our infrastructure meets meticulous FIPS 140-3 and audit standards.
 * Optimize Performance: Own end-to-end telemetry (Prometheus/Grafana/Splunk), lead root-cause analysis, and refine our operational runbooks.
 * Innovate: Evaluate and prototype next-gen identity and secrets technologies (e.g., OpenBao, Infisical) to ensure we stay ahead of industry standards.