Sr Advanced Software Engr

A DevSecOps & SRE Architect leads the design, implementation, and governance of secure, resilient, and automated enterprise platforms. This role bridges the gap between development, security, and operations, embedding security as a key stakeholder in every phase of the software lifecycle while ensuring high availability, observability, and reliability of production systems

Key Responsibilities

• Design and implement end-to-end DevSecOps pipelines that embed shift-left security practices (SAST, DAST, SCA, IAST) into CI/CD workflows.
• Define and enforce Policy-as-Code and security guardrails across cloud infrastructure using tools like OPA, or Azure Policy.
• Architect Infrastructure as Code (IaC) frameworks (Terraform, Ansible, Bicep) to provision and govern cloud environments securely.
• Build and maintain secure software supply chain practices including SBOM management, artifact signing, and dependency scanning.
• Conduct DevSecOps maturity assessments and develop organizational roadmaps for security automation adoption.
• Establish and enforce Zero Trust Architecture principles across network, identity, and workload layers.
• Integrate secrets management, certificate lifecycle management, and vault solutions (e.g., HashiCorp Vault, Azure Key Vault).
• Collaborate with AppSec and compliance teams to meet standards such as ISO 27001, NIST 800-53, SOC 2, and CIS Benchmarks.
• Define and own the organization's SRE strategy, roadmap, and operating model, including SLI/SLO/SLA frameworks and error budget policies.
• Design and implement observability architectures using APM tools, distributed tracing, log aggregation, and real-time alerting (e.g., Prometheus, Grafana, Datadog, Azure Monitor).
• Lead incident management, RCA/post-mortem processes, and drive systemic improvements to reduce MTTR and recurrence.
• Champion chaos engineering and resilience testing practices to proactively identify failure modes before they impact production.
• Establish toil reduction programs through automation, enabling SRE teams to focus on reliability engineering over manual operations.
• Design high-availability, fault-tolerant architectures for distributed systems and microservices on cloud platforms.
• Drive capacity planning, performance engineering, and scalability reviews across critical services.
• Build Internal Developer Platforms (IDPs) and self-service tooling to accelerate developer productivity while maintaining security and compliance guardrails.
• Establish GitOps workflows for continuous delivery and configuration management at scale.
• Oversee container orchestration strategy using Kubernetes (EKS, AKS, Rancher) and define standards for workload security, networking, and observability.
• Guide, mentor, and upskill cross-functional DevSecOps and SRE teams, fostering a culture of reliability, security, and continuous improvement.
• Facilitate development operations and identify gaps, setbacks, and shortcomings across processes.
• Collaborate with product, engineering, and business stakeholders to align platform strategy with organizational goals.
• Define and track KPIs and engineering metrics (deployment frequency, change failure rate, DORA metrics, mean time to detect).
• Deliver internal training, conduct architecture reviews, and represent the platform function in senior leadership forums.

Requirements

• Bachelor's or Master's degree in Computer Science, Information Systems, or a related field.
• 5-10 years of total industry experience, with 3+ years in a DevSecOps or SRE Lead role.
• Proven track record of leading large-scale cloud-native transformation programs.
• Certification of Cloud Platform and Infrastructure (AWS/Azure)
• Certification of DevOps tools.
• Strong analytical, problem-solving, and communication skills
• Ability to lead geographically distributed and cross-functional teams

Qualifications & Skills

Technical Skills

• Cloud, Virtualization, and Infrastructure
  • Microsoft Azure, AWS, GCP, VMware, and cloud services
  • Windows Server and Linux Server administration
  • RedHat, CentOS, and Ubuntu environments
  • System sizing, software installation, maintenance, and upgrades
  • Azure / VMware backup, restore, and disaster recovery tools

• DevOps, CI/CD, and Automation
  • DevOps pipelines and CI/CD practices
  • Bamboo, Octopus, Jenkins, Flux, and SonarQube
  • Terraform, PowerShell, Azure CLI, Shell, and Perl scripting
  • Software development and deployment automation
  • Power BI

• Containers and Kubernetes
  • Kubernetes cluster installation, configuration, and management
  • Docker containerization
  • Containerized application deployment and operations
  • KEDA, Scale Set Operations, ISTIO

• Networking and Directory Services
  • TCP/IP, DNS, and load balancing
  • NGINX, HAProxy
  • Active Directory, DNS configuration, Group Policy Objects, and OU structure
• API, Architecture, and Reliability
  • Swagger and Postman
  • Mission-critical system architecture
  • High availability design
  • Performance monitoring
  • Reliable infrastructure operations

Core SRE Competencies

• Deep expertise in secure SDLC and threat modelling
• Experience designing SLO frameworks and error budget management
• Strong knowledge of compliance frameworks: NIST, ISO 27001, SOC 2, CIS, FIPS
• Experience with Agile and SAFe methodologies

Preferred / Good to Have

• Certifications: CISSP, CISM, CKA, AWS/Azure Security Specialist, Google SRE
• Experience with AI/ML-driven DevOps automation and AIOps platforms
• Knowledge of FinOps and cloud cost optimization strategies
• Familiarity with Platform Engineering and Internal Developer Portals (Backstage)
• Six Sigma or ITIL certification for process excellence