DevSecOps Sr Lead/ Architect

DevSecOps Sr Lead/ Architect

Berkeley Heights, NJ

Contract

Role Summary

Owns the industry-standard CI/CD reference architecture for both the containerized and on-premises/VM-hosted architectural patterns, the tool-integration standards for the full security and quality toolchain, and the technical relationship with the customer. Sets the pattern the DevSecOps Leads implement, and provides architectural review and escalation support across the application portfolio, independent of any single programming language or framework.

Key Responsibilities

• Design the reference CI/CD architecture for each architectural pattern pipeline stage sequence, security-gate placement, artifact flow following industry-standard CI/CD and DevSecOps practice, applicable across the languages and frameworks present in the portfolio.
• Define the tool-integration architecture for Fortify, Sonatype, Fortify WebInspect, Wiz, SonarQube, Nexus, Harness, and GitHub Actions, including which integration model applies (e.g., SaaS vs. self-hosted scanning, credential and secrets-management approach).
• Set security gate policy: what constitutes a critical/blocking finding for SAST, SCA, DAST, and image scanning, and where that threshold is fixed versus configurable per application.
• Lead direct requirements discussions with the customer confirming tool licensing and environment details, resolving ambiguous or conflicting scope, and translating customer input into a concrete, buildable architecture.
• Review and approve the DevSecOps Leads' pipeline implementations against the reference architecture; act as the escalation point for applications that don't fit the standard pattern, including applications in a language or framework not yet covered by the standard.
• Own the artifact and registry strategy in Nexus (repository formats, naming conventions, retention) and the SBOM standard (format, tooling) applied across the portfolio.
• Own the CD architecture in Harness.
• Produce and maintain the architecture documentation, tool-integration standards, and decision records the Leads build against.
• Present architecture and pilot progress to customer stakeholders.

Required Skills

• 8+ years in DevSecOps or platform engineering, including 3+ years in an architect or technical-lead capacity.
• Demonstrated experience designing CI/CD reference architectures at scale (hundreds to low thousands of repositories), spanning both modern containerized stacks and legacy on-premises/VM-hosted stacks, across more than one programming language or framework.
• Deep GitHub Actions and Harness architecture experience reusable/templated workflows, runner strategy (hosted vs. self-hosted), and org-level policy enforcement.
• Strong architectural command of Fortify, Sonatype, and Fortify WebInspect (or directly comparable SAST/SCA/DAST tooling) able to select and design the integration model, not only configure an existing one.
• Hands-on and architectural experience with Docker, Helm, and Kubernetes/AKS.
• Architectural-level experience with Nexus (repository strategy across raw, Docker, and other formats) and SBOM standards (CycloneDX/SPDX).
• Strong Harness CD architecture experience, including progressive/blue-green deployment patterns, and familiarity with Ansible-driven deployment for on-premises/VM targets.
• Excellent requirements-elicitation and stakeholder-communication skills able to identify gaps or inconsistencies in customer-provided requirements and drive them to a resolved, buildable architecture.
• Strong technical writing architecture documents, standards, and decision records that a delivery team can build against directly.
• Hands On experience on integrating automated regression tests in the pipeline.
• Experience in terraform or other Iac tools.

Preferred

• Prior consulting or professional-services delivery experience with direct customer-facing technical ownership.
• Experience leading CI/CD standardization initiatives across a large, heterogeneous, multi-language application estate.
• Experience extending an existing CI/CD standard to a new or unusual language/framework/runtime not originally covered by it.
• Knowledge of .Net core /.Net FX 4.8 Frameworks