DevSecOps Architect

Job Description - DevSecOps Architect (GIS Elevate Program)

Position Title - DevSecOps Architect - GIS DevSecOps & AWS Cloud Architecture

Location: Remote as required and only on w2

Reports To: Senior Manager Cloud Platform Engineering / SHIELD ProgramLeadership
Program: GIS Elevate Modernization Program

Position Summary

• The SHIELD Architect will serve as the lead DevSecOps and Cloud Security Architect supporting the GIS Program. This role is responsible for designing and implementing secure scalable and compliant cloud solutions while embedding SHIELD (Security Harmonized in Every Lifecycle and Development) practices across the software development lifecycle.
• The architect will work closely with GIS application teams Cloud Platform Engineering Cybersecurity Enterprise Architecture and DevOps teams to establish secure-by-design architectures implement automated security controls and accelerate delivery through modern DevSecOps practices in AWS.

Key Responsibilities

AWS Cloud Architecture

• Design and review secure AWS-based architectures supporting GIS applications and platforms.
• Define cloud architecture standards reference patterns and security guardrails.
• Provide technical leadership on AWS services networking containers APIs and microservices.
• Drive Infrastructure as Code (Terraform) adoption and standardization.
• Ensure architectures meet security reliability scalability and compliance requirements.

SHIELD & DevSecOps Leadership

• Champion SHIELD principles and secure software delivery practices across the Elevate Program.
• Integrate security controls and compliance checks throughout CI/CD pipelines.
• Define and implement security gates policy-as-code and automated governance controls.
• Establish standardized DevSecOps patterns reusable across GIS teams.
• Partner with Cybersecurity teams to drive vulnerability management and risk reduction.

CI/CD & Platform Engineering

• Design and improve CI/CD pipelines using enterprise DevOps tooling.
• Implement automated security scanning including SAST DAST SCA Secrets Detection and IaC Scanning.
• Support GitHub Azure DevOps JFrog SonarQube Terraform and container platform integrations.
• Enable development teams through self-service DevSecOps capabilities and pipeline automation.

Security Architecture & Risk Management

• Lead threat modeling and application security architecture reviews.
• Identify assess and mitigate cloud and application security risks.
• Develop security standards reference architectures and implementation guidance.
• Support audit compliance and regulatory requirements.
• Define and track security KPIs KRIs and DevSecOps maturity metrics.

Stakeholder Engagement

• Collaborate with GIS product teams architects engineers and cybersecurity partners.
• Act as a trusted advisor for cloud security and DevSecOps strategy.
• Conduct architecture reviews and provide design recommendations.
• Mentor engineers and architects on AWS and DevSecOps best practices.

Required Qualifications - Experience

• 10 years of experience in Cloud Architecture Application Architecture DevOps or Cybersecurity.
• 5 years of experience designing and implementing enterprise
• DevSecOps solutions.
• Experience supporting large-scale cloud transformation programs.
• Experience working with utility GIS or mission-critical enterprise platforms preferred.

Technical Skills

• Deep expertise in AWS Cloud Architecture.
• Strong understanding of DevSecOps methodologies and secure SDLC practices.

Hands-on experience with:

• AWS
• Terraform
• GitHub Enterprise
• Azure DevOps (ADO)
• CI/CD Pipelines
• Docker and Kubernetes
• JFrog Artifactory
• SonarQube
• SAST DAST and SCA tools
• Security automation and Policy as Code
• Security Knowledge
• Cloud Security Architecture
• IAM and Access Management
• Secrets Management
• Encryption and Key Management
• Application Security
• Threat Modeling
• Vulnerability Management
• Zero Trust Principles
• Compliance and Audit Controls
• Preferred Qualifications
• AWS Certified Solutions Architect (Professional preferred)
• AWS Security Specialty Certification
• CISSP CCSP or similar security certification
• Experience with GIS technologies and platforms
• Experience implementing Internal Developer Platforms (IDP)
• Experience with AI-assisted development and secure AI-DLC practices

Success Measures

• The SHIELD Architect will be successful by:
• Increasing adoption of SHIELD DevSecOps practices across GIS teams.
• Reducing security vulnerabilities and remediation timelines.
• Improving pipeline automation compliance and developer productivity.
• Establishing secure reusable AWS architecture patterns.
• Accelerating delivery while maintaining security and regulatory compliance.
• Supporting successful execution of the GIS Elevate Program modernization strategy.
  

Required Skills:

DevSecOpsAWSGIS