Overview

Location: Thane — Hybrid

Responsibilities

• Own the end-to-end DevSecOps architecture across multi-cloud (AWS and Azure) environments, embedding security into every stage of the SDLC and CI/CD pipeline.
• Define and drive Infrastructure-as-Code (Terraform), configuration management (Ansible), and policy-as-code standards, closing the IaC and CI/CD maturity gap.
• Architect, harden, and scale container platforms (Kubernetes — EKS/AKS), Azure Virtual Desktop, and cloud-native services.
• Design CI/CD pipeline architecture with integrated SAST, DAST, SCA, secrets management, and artifact/image scanning.
• Design cloud security posture (CSPM/CWPP), identity and access architecture, encryption, secrets management, and endpoint protection integration (e.g., CrowdStrike).
• Align architecture to recognized frameworks (NIST, CIS, SOC 2; FedRAMP a plus) and lead security hardening, threat modeling, and remediation.
• Integrate security telemetry into enterprise observability (Splunk, Dynatrace, Grafana) and the incident-response workflow.
• Serve as CyberTech's senior technical representative to client leadership — presenting architecture, roadmaps, and value with clarity and confidence.
• Engage client architects and executives as a peer; build trust, translate technical decisions into business outcomes, and influence direction.
• Produce and deliver executive-grade briefings, proposals, and technical roadmaps, and lead workshops and design reviews.
• Provide architectural direction and mentorship to Cloud, Infrastructure Ops, and CI/CD engineers.
• Partner with the Service Delivery Practice Leader and Engagement Manager to grow the engagement and strengthen the practice.
• Set standards, review designs, and safeguard delivery quality with a goal of zero security escalations.

Qualifications

• [12+] years in cloud and DevOps engineering, including [4+] years in a DevSecOps or cloud architect capacity.
• Deep, hands-on expertise across AWS and Azure; Kubernetes (EKS/AKS); Infrastructure-as-Code (Terraform); configuration management (Ansible); and CI/CD tooling (e.g., Azure DevOps, GitHub Actions, GitLab CI, Jenkins).
• Strong DevSecOps toolchain experience: SAST/DAST/SCA, secrets management (e.g., HashiCorp Vault), policy-as-code (e.g., OPA), container and image scanning, and cloud security posture management.
• Solid grounding in cloud security, IAM, network security, and compliance frameworks (NIST / CIS / SOC 2).
• Exceptional communication and executive presence — a proven ability to present complex architecture to senior client stakeholders and represent an organization credibly in front of leadership.
• Certifications such as AWS or Azure Solutions Architect (Professional/Expert), CKA/CKS, CISSP or CCSP, and HashiCorp Terraform Associate.
• Exposure to FedRAMP or other regulated-cloud environments.
• Familiarity with GIS / Esri (ArcGIS, ArcGIS Online) or large-scale enterprise IT operations.
• Awareness of modern data platforms (e.g., Microsoft Fabric) as an adjacency to the practice.
• A hardened, standardized DevSecOps blueprint adopted across the engagement.
• Measurable gains in CI/CD and IaC maturity and a sustained reduction in security findings.
• Recognized by client leadership as a trusted, articulate technical advisor.