Greetings from Maneva!
Job Description
Job Title - AWS DevOps Architect
Experience - 10 - 15 Years
Location - Thane / Ghansoli
Notice - Immediate Joiner
Requirement:-
- 10 years of experience in DevOps/DevSecOps architecture with a strong focus on AWS at enterprise scale.
- AWS Certified Solutions Architect - Professional certification (mandatory).
- Demonstrated experience building secure CI/CD pipelines and DevSecOps frameworks for enterprise cloud.
- Expert-level knowledge of AWS developer and deployment services: CodePipeline CodeBuild CodeDeploy CodeCommit ECR ECS EKS Lambda and Step Functions.
- Strong expertise in security testing tools and their pipeline integration: SAST (SonarQube Checkmarx Fortify) DAST (OWASP ZAP Burp Suite) SCA (Snyk WhiteSource Dependabot).
- Deep experience with Infrastructure as Code (Terraform CloudFormation CDK) and policy-as-code tools (OPA Sentinel Checkov cfn-nag tfsec).
- Solid understanding of container security across build deploy and runtime phases including image scanning pod security policies and network policies in Kubernetes/EKS.
- Strong knowledge of regulatory compliance frameworks relevant to banking (PCI-DSS SOC 2 ISO 27001 RBI IT guidelines) and their automation within delivery pipelines.
- Hands-on experience with secrets management credential rotation and certificate lifecycle automation in cloud environments.
- Proficiency in scripting and automation using Python Bash Go or similar languages for building custom security integrations and pipeline tooling.
- Design and architect end-to-end DevSecOps pipelines on AWS integrating security testing compliance checks and automated governance at every stage of the SDLC.
- Define and implement CI/CD architecture using AWS CodePipeline CodeBuild CodeDeploy and third-party tools (Jenkins GitLab CI GitHub Actions) with embedded security gates.
- Architect and enforce shift-left security practices including Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA) and Interactive Application Security Testing (IAST).
- Design and manage Infrastructure as Code (IaC) security frameworks using Terraform Cloud Formation or AWS CDK with integrated policy-as-code validation (OPA Checkov cfn-nag tfsec).
- Architect secrets management and credential rotation strategies using AWS Secrets Manager AWS Systems Manager Parameter Store and HashiCorp Vault.
- Design automated compliance-as-code frameworks that continuously validate infrastructure and application configurations against PCI-DSS SOC 2 ISO 27001 and RBI IT guidelines.
- Implement and govern supply chain security practices including software bill of materials (SBOM) dependency vulnerability tracking and artifact signing and verification.
- Design secure deployment strategies including blue-green canary and rolling deployments with automated rollback mechanisms triggered by security anomalies.
- Architect observability and security monitoring pipelines integrating CloudWatch CloudTrail X-Ray and third-party SIEM/SOAR platforms for real-time threat detection in deployment or masters degree in computer science Cybersecurity Information Security or a related field.
- Bachelors or masters degree in computer science Cybersecurity Information Security or a related field.
If you are excited to grab this opportunity please apply directly or share your CV atand
Greetings from Maneva! Job Description Job Title - AWS DevOps Architect Experience - 10 - 15 Years Location - Thane / Ghansoli Notice - Immediate Joiner Requirement:- 10 years of experience in DevOps/DevSecOps architecture with a strong focus on AWS at enterprise scale. AWS Certified Solution...
Greetings from Maneva!
Job Description
Job Title - AWS DevOps Architect
Experience - 10 - 15 Years
Location - Thane / Ghansoli
Notice - Immediate Joiner
Requirement:-
- 10 years of experience in DevOps/DevSecOps architecture with a strong focus on AWS at enterprise scale.
- AWS Certified Solutions Architect - Professional certification (mandatory).
- Demonstrated experience building secure CI/CD pipelines and DevSecOps frameworks for enterprise cloud.
- Expert-level knowledge of AWS developer and deployment services: CodePipeline CodeBuild CodeDeploy CodeCommit ECR ECS EKS Lambda and Step Functions.
- Strong expertise in security testing tools and their pipeline integration: SAST (SonarQube Checkmarx Fortify) DAST (OWASP ZAP Burp Suite) SCA (Snyk WhiteSource Dependabot).
- Deep experience with Infrastructure as Code (Terraform CloudFormation CDK) and policy-as-code tools (OPA Sentinel Checkov cfn-nag tfsec).
- Solid understanding of container security across build deploy and runtime phases including image scanning pod security policies and network policies in Kubernetes/EKS.
- Strong knowledge of regulatory compliance frameworks relevant to banking (PCI-DSS SOC 2 ISO 27001 RBI IT guidelines) and their automation within delivery pipelines.
- Hands-on experience with secrets management credential rotation and certificate lifecycle automation in cloud environments.
- Proficiency in scripting and automation using Python Bash Go or similar languages for building custom security integrations and pipeline tooling.
- Design and architect end-to-end DevSecOps pipelines on AWS integrating security testing compliance checks and automated governance at every stage of the SDLC.
- Define and implement CI/CD architecture using AWS CodePipeline CodeBuild CodeDeploy and third-party tools (Jenkins GitLab CI GitHub Actions) with embedded security gates.
- Architect and enforce shift-left security practices including Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA) and Interactive Application Security Testing (IAST).
- Design and manage Infrastructure as Code (IaC) security frameworks using Terraform Cloud Formation or AWS CDK with integrated policy-as-code validation (OPA Checkov cfn-nag tfsec).
- Architect secrets management and credential rotation strategies using AWS Secrets Manager AWS Systems Manager Parameter Store and HashiCorp Vault.
- Design automated compliance-as-code frameworks that continuously validate infrastructure and application configurations against PCI-DSS SOC 2 ISO 27001 and RBI IT guidelines.
- Implement and govern supply chain security practices including software bill of materials (SBOM) dependency vulnerability tracking and artifact signing and verification.
- Design secure deployment strategies including blue-green canary and rolling deployments with automated rollback mechanisms triggered by security anomalies.
- Architect observability and security monitoring pipelines integrating CloudWatch CloudTrail X-Ray and third-party SIEM/SOAR platforms for real-time threat detection in deployment or masters degree in computer science Cybersecurity Information Security or a related field.
- Bachelors or masters degree in computer science Cybersecurity Information Security or a related field.
If you are excited to grab this opportunity please apply directly or share your CV atand
View more
View less