Devops Architect

« Back to Jobs

Devops Architect

Hexaware Technologies UK Limited | City of Westminster, ENG, GB

Posted 17 days ago

Apply Now

Description

Cloud Infrastructure & Terraform



  • Design, deploy and manage cloud resources across AWS, Azure and GCP.

  • Develop and maintain reusable Terraform modules for cloud resource deployment.

  • Implement Infrastructure as Code standards and support application teams with Terraform-related implementation and troubleshooting.

  • Promote reusable, scalable and secure infrastructure deployment patterns.


CI/CD & DevSecOps



  • Build, maintain and support CI/CD pipelines using GitLab CI/CD and Azure DevOps.

  • Integrate infrastructure and security validations into application deployment pipelines.

  • Troubleshoot pipeline failures and security-policy validation issues.

  • Support development teams in adopting automated security controls within their existing CI/CD workflows., Develop automation solutions using Python to improve operational efficiency and reduce repetitive manual activities.

  • Develop and maintain Rego/OPA policies for automated cloud and Infrastructure as Code security validation.

  • Investigate policy failures, false positives and configuration issues.

  • Work with application teams to understand policy violations and provide appropriate remediation guidance.


Cloud Security



  • Strong understanding of cloud security controls across AWS, Azure and GCP.

  • Implement and support Azure Policies for governance and security enforcement.

  • Work with AWS Service Control Policies (SCPs) and Resource Control Policies (RCPs).

  • Understand and troubleshoot cloud IAM roles, permissions and access controls.

  • Support secure deployment patterns and cloud governance requirements across multiple cloud environments.


CNAPP/CSPM



  • Strong understanding of Cloud-Native Application Protection Platform (CNAPP) and Cloud Security Posture Management (CSPM) concepts.

  • Hands-on or operational knowledge of Wiz and CloudGuard.

  • Investigate cloud security findings, policy violations and configuration issues identified through CNAPP/CSPM platforms.

  • Work with application and Cyber Security teams to understand findings and support remediation.

  • Assist application teams with onboarding and adoption of cloud security solutions.


Stakeholder Collaboration & Application Support



  • Collaborate closely with Cyber Security, Cloud Engineering, DevOps and application development teams.

  • Provide technical guidance to application teams during solution adoption and onboarding.

  • Investigate and troubleshoot security policy, Terraform, CI/CD and cloud configuration issues.

  • Translate security requirements into practical technical solutions that development teams can implement.

  • Provide clear guidance and documentation for security controls, integration patterns and remediation activities.

  • Act as a technical point of contact for application teams throughout the adoption life cycle.


We are looking for an experienced Senior Cloud Security/DevSecOps Engineer with 10+ years of IT experience and strong expertise in multi-cloud infrastructure, Infrastructure as Code (IaC), CI/CD automation, cloud security and policy-as-code.


The ideal candidate will have hands-on experience across AWS, Azure and GCP, with strong knowledge of Terraform, GitLab CI/CD, Azure DevOps, Python and Rego/OPA. The role will work closely with Cyber Security, Cloud Engineering and application teams to implement security controls, investigate policy-related issues and enable development teams to securely adopt cloud security and automation solutions.,


Key technical focus



  • Cloud: AWS, Microsoft Azure, GCP

  • Infrastructure as Code: Terraform

  • Terraform: Resource deployment, reusable module development and troubleshooting

  • CI/CD: GitLab CI/CD, Azure DevOps

  • Automation: Python

  • Policy as Code: Rego/Open Policy Agent (OPA)

  • Cloud Security: Azure Policy, AWS SCP, AWS RCP, IAM roles and permissions

  • CNAPP/CSPM: Wiz, CloudGuard

  • DevSecOps: Integration of security and policy controls into CI/CD workflows

  • Troubleshooting: Cloud policy, IaC, pipeline and security control issues


Soft Skills



  • Strong communication and stakeholder-management skills.

  • Ability to work effectively with both Cyber Security and application development teams.

  • Strong problem-solving and troubleshooting capabilities.

  • Ability to explain complex security requirements in simple, practical terms.
  • Collaborative approach when working with developers, engineers and security stakeholders.

  • Ability to guide application teams through onboarding and solution adoption.

  • Strong documentation and knowledge-sharing skills.


#J-18808-Ljbffr