Platform – DevSecOps Delivery Architect

This is a fully remote position, open to applicants in Alabama, +20 more states.

📋 Description

• Design, implement, and maintain centralized reusable CI/CD pipeline templates utilizing GitHub Actions or GitLab CI.

• Create a modular release architecture that includes universal scanning, sanitization, and various downstream delivery targets.

• Execute GitOps promotion using ArgoCD/Kargo, alongside progressive canary rollouts and Amazon EKS delivery.

• Develop automated machine-image pipelines and blue/green agent updates for VM-based production environments.

• Offer project scaffolding and Helm/IaC modules that enable compliant engineering self-service.

• Integrate SAST, SCA, container image, CVE, and secret-detection gates into the build and deployment processes.

• Automate the generation of software artifacts and deployment logs for SOC 2 Type II, HIPAA, and federal public health audits.

• Design and manage secrets distribution through External Secrets Operator, AWS Secrets Manager, and Parameter Store with a focus on least-privilege IAM.

• Enforce automated operational readiness standards prior to services reaching staging or production.

• Integrate OpenTelemetry instrumentation for efficient logging, distributed tracing, and metrics that feed into Grafana LGTM and Datadog.

• Incorporate PHI and PII redaction checks within build and logging pipelines.

• Architect and manage a secure private AI infrastructure, including gateways, traffic routing, rate limiting, and privately hosted LLM endpoints.

• Design, deploy, and support scalable environments for autonomous agentic workflows, vector storage, and operational context retrieval.

• Collaborate with Engineering leads to standardize secure and compliant software delivery.

⛳️ Requirements

• Minimum of 5 years of practical experience in Platform Engineering, DevOps, or Site Reliability Engineering (SRE).

• Proven experience in designing and standardizing enterprise CI/CD pipelines.

• Extensive hands-on expertise with Amazon Web Services (AWS) and Kubernetes (Amazon EKS), covering container networking, pod security, and Helm chart lifecycle management.

• Practical experience with GitOps controllers (ArgoCD, Flux) and automated canary deployment strategies.

• Software development experience in C# / .NET, Node.js, and Python.

• Hands-on experience in engineering self-hosted AI architecture, including AI model gateways, intelligent request routing, and multi-step agentic workflows.

• Familiarity with VM-based delivery concepts, including HashiCorp Packer, EC2 Launch Templates, Cloud-Init, or rolling agent deployments.

• Experience in integrating security scanning tools such as Trivy, Snyk, SonarQube, or AWS Inspector into deployment workflows as quality gates.

• Strong experience in authoring modular Terraform or Pulumi definitions.

• Experience working with AI-assisted development tools and designing infrastructure for AI-driven workloads.

• Familiarity with AWS GovCloud and GovCloud IAM/IRSA partition boundaries is a plus.

• Background in HIPAA-regulated, HITRUST, or public-sector SaaS data environments is preferred.

• Experience deploying vector databases and embedding inference pipelines is advantageous.

🏝️ Benefits

• 100% Remote Flexibility: Work from anywhere within the United States.

• Medical, Dental, and Vision coverage beginning on your first day of employment.

• 401(k) matching program available.

• Opportunities for employee stock ownership through Constellation Software.

• Three weeks of vacation provided.

• Five personal days offered.

• Company-recognized holidays included.