DevSecOps Architect
Vansh KumarUnited StatesSENIORPosted 2h ago
DevSecOps ArchitectureShift-Left STO IntegrationTrivySnykSonarQubeVulnerability ManagementCompliance & GovernanceAutomated Compliance GatesSecret Detection in PR HooksContainer Image Registry GovernanceSBOM GenerationCI/CD & Cloud Security
About the Role
We are seeking a DevSecOps Architect for a contract position in Phoenix, AZ. This role focuses on implementing security practices across the software development lifecycle and integrating security testing into CI/CD pipelines.
Key Responsibilities
• Implement Shift-Left Security practices across the SDLC
• Integrate Security Testing and Orchestration (STO) into CI/CD pipelines
• Implement vulnerability scanning using Trivy, Snyk, and SonarQube
• Establish automated security and compliance gates
• Implement secret detection in Pull Request (PR) hooks
• Manage container image registry governance
• Automate Software Bill of Materials (SBOM) generation
• Drive cloud security, compliance, and vulnerability management
Requirements
• 10–15 years of experience in DevSecOps architecture
• Expertise in Shift-Left STO Integration
• Proficiency with Trivy, Snyk, and SonarQube
• Strong background in vulnerability management
• Experience with compliance and governance
• Knowledge of automated compliance gates
• Familiarity with secret detection in PR hooks
• Understanding of container image registry governance
• Experience with SBOM generation
• Skills in CI/CD and cloud security