DevSecOps Architect

We are seeking a highly skilled Dev Sec Ops  Architect with deep expertise in Azure Cloud, Security Architecture, Terraform (IaC), vulnerability management
, and secure CI/CD implementation. The ideal candidate will design and implement secure cloud platforms, embed security into Dev Ops pipelines, and ensure compliance with enterprise/ISP-grade security standards.

• Define and lead Dev Sec Ops  strategy and secure cloud architecture for Azure workloads.
• Design and implement security controls across cloud infrastructure, networking, and identity.
• Develop and manage Infrastructure as Code (Terraform) for secure and scalable deployments.
• Integrate security into CI/CD pipelines (Dev Sec Ops ) with automated checks and governance.
• Perform cloud security assessments
  , identify risks, and drive remediation plans.
• Own vulnerability management
  : scanning, triage, remediation, and reporting.
• Ensure secure configurations using best practices and compliance standards (CIS, NIST, ISO, etc.).
• Implement policy-as-code and security guardrails across Azure environments.
• Work with engineering, security, and operations teams to reduce risk and improve deployment maturity.
• Support incident response and root-cause analysis related to cloud security events.
• Provide technical leadership, mentoring, and documentation for Dev Sec Ops  best practices.

• 8+ years of IT experience with 4+ years in Dev Sec Ops  / Cloud Security Architecture
  .
• Strong experience with Terraform (modules, remote state, work spaces, best practices).
• Experience with security hardening
  , cloud governance, and secure landing zones.
• Proven experience in addressing vulnerabilities and secure remediation.
• Strong understanding of:
• • IAM, RBAC, Conditional Access, MFA
  • Network Security (NSGs, firewalls, private endpoints, VPN)
  • CI/CD pipeline security experience (Azure Dev Ops / Git Hub Actions / Jenkins)
  • Experience implementing:
  • • SAST/DAST, dependency scanning, container scanning
    • Secrets scanning and IaC scanning

• Kubernetes security (AKS), container security tools
• Azure Defender / Microsoft Defender for Cloud
• Experience working in ISP/telecom or high-security enterprise environments
• Certifications (nice to have):
• AZ-500, AZ-104, AZ-305
• CISSP / CCSP
• Terraform Associate

• Vulnerability scanners (Qualys, Tenable, etc.)
• Container & IaC security (Trivy, Checkov, tfsec, Sonar Qube)