DevSecOps Architect

Job Description - DevSecOps Architect (GIS Elevate Program)

Position Title - DevSecOps Architect - GIS DevSecOps & AWS Cloud Architecture

Location: Remote as required and only on w2

Reports To: Senior Manager, Cloud Platform Engineering / SHIELD Program Leadership

Program: GIS Elevate Modernization Program

Position Summary

• The SHIELD Architect will serve as the lead DevSecOps and Cloud Security Architect supporting the GIS Program. This role is responsible for designing and implementing secure, scalable, and compliant cloud solutions while embedding SHIELD (Security Harmonized in Every Lifecycle and Development) practices across the software development lifecycle.
• The architect will work closely with GIS application teams, Cloud Platform Engineering, Cybersecurity, Enterprise Architecture, and DevOps teams to establish secure-by-design architectures, implement automated security controls, and accelerate delivery through modern DevSecOps practices in AWS.

Key Responsibilities

AWS Cloud Architecture

• Design and review secure AWS-based architectures supporting GIS applications and platforms.
• Define cloud architecture standards, reference patterns, and security guardrails.
• Provide technical leadership on AWS services, networking, containers, APIs, and microservices.
• Drive Infrastructure as Code (Terraform) adoption and standardization.
• Ensure architectures meet security, reliability, scalability, and compliance requirements.

SHIELD & DevSecOps Leadership

• Champion SHIELD principles and secure software delivery practices across the Elevate Program.
• Integrate security controls and compliance checks throughout CI/CD pipelines.
• Define and implement security gates, policy-as-code, and automated governance controls.
• Establish standardized DevSecOps patterns reusable across GIS teams.
• Partner with Cybersecurity teams to drive vulnerability management and risk reduction.

CI/CD & Platform Engineering

• Design and improve CI/CD pipelines using enterprise DevOps tooling.
• Implement automated security scanning including SAST, DAST, SCA, Secrets Detection, and IaC Scanning.
• Support GitHub, Azure DevOps, JFrog, SonarQube, Terraform, and container platform integrations.
• Enable development teams through self-service DevSecOps capabilities and pipeline automation.

Security Architecture & Risk Management

• Lead threat modeling and application security architecture reviews.
• Identify, assess, and mitigate cloud and application security risks.
• Develop security standards, reference architectures, and implementation guidance.
• Support audit, compliance, and regulatory requirements.
• Define and track security KPIs, KRIs, and DevSecOps maturity metrics.

Stakeholder Engagement

• Collaborate with GIS product teams, architects, engineers, and cybersecurity partners.
• Act as a trusted advisor for cloud security and DevSecOps strategy.
• Conduct architecture reviews and provide design recommendations.
• Mentor engineers and architects on AWS and DevSecOps best practices.

Required Qualifications - Experience

• 10+ years of experience in Cloud Architecture, Application Architecture, DevOps, or Cybersecurity.
• 5+ years of experience designing and implementing enterprise
• DevSecOps solutions.
• Experience supporting large-scale cloud transformation programs.
• Experience working with utility, GIS, or mission-critical enterprise platforms preferred.

Technical Skills

• Deep expertise in AWS Cloud Architecture.
• Strong understanding of DevSecOps methodologies and secure SDLC practices.

Hands-on experience with:

• AWS
• Terraform
• GitHub Enterprise
• Azure DevOps (ADO)
• CI/CD Pipelines
• Docker and Kubernetes
• JFrog Artifactory
• SonarQube
• SAST, DAST, and SCA tools
• Security automation and Policy as Code
• Security Knowledge
• Cloud Security Architecture
• IAM and Access Management
• Secrets Management
• Encryption and Key Management
• Application Security
• Threat Modeling
• Vulnerability Management
• Zero Trust Principles
• Compliance and Audit Controls
• Preferred Qualifications
• AWS Certified Solutions Architect (Professional preferred)
• AWS Security Specialty Certification
• CISSP, CCSP, or similar security certification
• Experience with GIS technologies and platforms
• Experience implementing Internal Developer Platforms (IDP)
• Experience with AI-assisted development and secure AI-DLC practices

Success Measures

• The SHIELD Architect will be successful by:
• Increasing adoption of SHIELD DevSecOps practices across GIS teams.
• Reducing security vulnerabilities and remediation timelines.
• Improving pipeline automation, compliance, and developer productivity.
• Establishing secure, reusable AWS architecture patterns.
• Accelerating delivery while maintaining security and regulatory compliance.
• Supporting successful execution of the GIS Elevate Program modernization strategy.