Sr Advanced Software Engr

A DevSecOps & SRE Architect leads the design, implementation, and governance of secure, resilient, and automated enterprise platforms. This role bridges the gap between development, security, and operations, embedding security as a key stakeholder in every phase of the software lifecycle while ensuring high availability, observability, and reliability of production systems

Key Responsibilities

• Design and implement end-to-end DevSecOps pipelines that embed shift-left security practices (SAST, DAST, SCA, IAST) into CI/CD workflows.

• Define and enforce Policy-as-Code and security guardrails across cloud infrastructure using tools like OPA, or Azure Policy.

• Architect Infrastructure as Code (IaC) frameworks (Terraform, Ansible, Bicep) to provision and govern cloud environments securely.

• Build and maintain secure software supply chain practices including SBOM management, artifact signing, and dependency scanning.

• Conduct DevSecOps maturity assessments and develop organizational roadmaps for security automation adoption.

• Establish and enforce Zero Trust Architecture principles across network, identity, and workload layers.

• Integrate secrets management, certificate lifecycle management, and vault solutions (e.g., HashiCorp Vault, Azure Key Vault).

• Collaborate with AppSec and compliance teams to meet standards such as ISO 27001, NIST 800-53, SOC 2, and CIS Benchmarks.

• Define and own the organization's SRE strategy, roadmap, and operating model, including SLI/SLO/SLA frameworks and error budget policies.

• Design and implement observability architectures using APM tools, distributed tracing, log aggregation, and real-time alerting (e.g., Prometheus, Grafana, Datadog, Azure Monitor).