Platform & DevSecOps Delivery Architect

This is a fully remote position, open to applicants in Alabama, +20 more states.

📋 Description

• Design, implement, and uphold centralized reusable CI/CD pipeline templates utilizing GitHub Actions or GitLab CI.

• Construct a modular release framework that includes universal scanning and sanitization for both upstream and downstream delivery branching.

• Execute GitOps promotion using ArgoCD/Kargo, facilitate progressive canary rollouts with Argo Rollouts, and manage Amazon EKS delivery.

• Develop machine-image pipelines leveraging HashiCorp Packer and AWS Launch Templates, along with blue/green agent updates for EC2/ClearData Docker systems.

• Deliver compliant project scaffolding and Helm/IaC modules to enable engineering self-service.

• Integrate SAST, SCA, container image, snapshot CVE, and secret-detection gates within build processes.

• Produce software artifacts and deployment logs for SOC 2 Type II, HIPAA, and federal public-health audits.

• Design and manage secrets distribution through External Secrets Operator using AWS Secrets Manager/Parameter Store and enforce least-privilege IAM policies.

• Collaborate with Engineering leads to uphold automated operational readiness standards prior to staging or production phases.

• Incorporate OpenTelemetry instrumentation for logging, distributed tracing, and metrics feeding into Grafana LGTM and Datadog.

• Integrate PHI and PII sanitization checks into build and logging pipelines.

• Architect and maintain secure private AI infrastructure, including gateways, traffic routing, rate limiting, and private cloud-hosted LLM endpoints.

• Design, deploy, and support scalable environments for autonomous agentic workflows, multi-agent pipelines, vector storage, and operational context retrieval.

⛳️ Requirements

• Over 5 years of practical experience in Platform Engineering, DevOps, or Site Reliability Engineering (SRE).

• Proven expertise in designing and standardizing enterprise CI/CD pipelines.

• Extensive hands-on knowledge of Amazon Web Services (AWS) and Kubernetes (Amazon EKS), focusing on container networking, pod security, and Helm chart lifecycle management.

• Practical experience with GitOps controllers (ArgoCD, Flux) and automated canary deployment methods (Argo Rollouts, weighted ingress, or ALB traffic shifting).

• Hands-on software development experience in C# / .NET, Node.js, and Python.

• Experience in engineering self-hosted AI architecture, including AI model gateways, intelligent request routing, and orchestrating multi-step agentic workflows.

• Familiarity with VM-based delivery concepts (HashiCorp Packer, EC2 Launch Templates, Cloud-Init, or rolling agent deployments).

• Proficiency in integrating security scanning tools (Trivy, Snyk, SonarQube, AWS Inspector, or similar) directly into deployment workflows as essential quality gates.

• Solid experience in authoring modular, maintainable Terraform or Pulumi definitions.

• Practical capability with AI-assisted development tools and infrastructure for AI-driven workloads.

• Experience within AWS GovCloud and understanding GovCloud IAM/IRSA partition boundaries is highly appreciated.

• Background in HIPAA-regulated, HITRUST, or public-sector SaaS data environments is highly valued.

• Experience in building and deploying backend services or automated agent frameworks in C# (.NET Core), Python, or Node.js/TypeScript is highly regarded.

• Experience in deploying and managing vector databases like Qdrant or pgvector and integrating inference pipelines in containerized environments is highly regarded.

🏝️ Benefits

• 100% Remote Flexibility: Work from anywhere within the United States.

• Medical, Dental, and Vision coverage begins on your first day of employment.

• 401(k) matching program available.

• Opportunities for employee stock ownership through Constellation Software.

• Three weeks of vacation.

• Five personal days.

• Company-recognized holidays.