Charlotte, North Carolina
Job Summary
We are looking for one senior, hands-on DevSecOps Platform Architect / Lead Engineer to support an enterprise DevSecOps services enhancement project.
The resource will assess the current enterprise DevSecOps environment, identify platform scalability, resiliency, availability, security, observability, and developer-experience gaps, and provide design guidance, implementation support, runbooks, roadmap inputs, and proof-of-concept/workshop support.
The role requires strong hands-on experience across enterprise CI/CD platforms, GitLab, Artifactory, build runners, DevSecOps security controls, observability, platform reliability, automation, Kubernetes/OpenShift, and large-scale engineering toolchains.
This is a single-resource requirement, so the candidate must be capable of leading customer discussions, performing technical assessments, preparing architecture recommendations, and supporting hands-on implementation/configuration activities.
Key Responsibilities
Assess the current enterprise DevSecOps architecture, integrations, infrastructure, operations, dependencies, performance, and developer workflows.
Review and analyze platforms and services such as GitLab, Artifactory, Grafana, Coverity, Polyspace, Elastic Build Runner Services, Kubernetes/OpenShift, databases, storage, networking, identity services, and related infrastructure.
Identify bottlenecks, single points of failure, technical debt, capacity constraints, resiliency gaps, monitoring gaps, security gaps, and operational risks.
Establish performance and capacity baselines for enterprise DevSecOps services.
Evaluate scalability requirements to support growth from approximately 5,000 to 15,000 users over three years.
Assess build runner scalability, concurrency, autoscaling behavior, queue-time objectives, workload isolation, infrastructure requirements, service quotas, and cost drivers.
Evaluate global Active-Active architecture options, including regional topology, traffic management, replication, failover, data consistency, security, operational complexity, cost, and product constraints.
Assess developer experience issues such as pipeline delays, onboarding challenges, service interruptions, latency, runner bottlenecks, lack of self-service, documentation gaps, and support friction.
Design and recommend improvements to enhance availability, reliability, resiliency, scalability, security, automation, developer experience, and operational sustainability.
Support secure software supply-chain improvements across CI/CD pipelines, including security controls, reusable templates, automated gates, exception workflows, and centralized reporting.
Support integration or design of security capabilities such as SAST, SCA, secrets detection, DAST, Infrastructure-as-Code scanning, container scanning, malware detection, license compliance, vulnerability management, SBOM management, artifact signing, provenance, trusted promotion, protected runners, and compliance evidence retention.
Define or support trusted and reproducible build practices using approved registries, approved repositories, dependency pinning, artifact immutability, least-privilege access, runner security, and prevention of unauthorized build inputs.
Assess and improve CI/CD observability across logs, metrics, traces, dashboards, alerts, SLIs, SLOs, synthetic monitoring, service-health views, dependency monitoring, and incident-response integration.
Design or enhance enterprise dashboards for platform operations, product owners, service desk teams, developers, security teams, and leadership.
Define actionable alerting, escalation, severity, deduplication, suppression, and on-call integration recommendations to reduce alert fatigue and improve issue detection.
Prepare architecture outputs, gap analysis, resiliency assessment, observability design, roadmap, runbooks, technical findings, recommendations, and knowledge-transfer material.
Participate in customer workshops, design reviews, weekly status meetings, and monthly reporting inputs.
Support hands-on proof-of-concept or workshop activities for selected DevSecOps capabilities using representative applications and pipelines.
Skill Requirements
Strong hands-on experience with enterprise DevOps / DevSecOps platforms and software delivery toolchains.
Strong experience with GitLab administration, GitLab CI/CD, pipeline templates, GitLab runners, runner autoscaling, pipeline optimization, access controls, and enterprise-scale GitLab usage.
Experience with artifact repositories and registries such as JFrog Artifactory, Nexus, Harbor, GitLab Registry, or equivalent.
Experience with enterprise observability tools such as Grafana, Prometheus, Loki, ELK/OpenSearch, Splunk, Datadog, New Relic, AppDynamics, or equivalent.
Experience with static analysis, code quality, and security tools such as Coverity, Polyspace, SonarQube, Checkmarx, Fortify, Snyk, Black Duck, Prisma Cloud, Trivy, Grype, Anchore, or equivalent.
Strong understanding of CI/CD reliability, pipeline performance, queue-time analysis, runner provisioning, runner isolation, autoscaling, workload management, and build infrastructure optimization.
Experience with Kubernetes, OpenShift, containerized workloads, container registries, Helm, Kustomize, and deployment automation.
Experience with platform resiliency, high availability, backup and recovery, disaster recovery, service dependency mapping, capacity planning, and scalability analysis.
Experience evaluating or designing Active-Active, multi-region, or highly available enterprise platform architectures.
Experience with logs, metrics, traces, dashboards, alerting, synthetic monitoring, SLIs, SLOs, error budgets, escalation models, and incident-response integration.
Experience with secure software supply-chain practices including SAST, SCA, secrets scanning, DAST, IaC scanning, container scanning, malware detection, license compliance, vulnerability management, SBOM, artifact signing, provenance, trusted promotion, and compliance evidence.
Understanding of NIST SSDF, SLSA, SPDX, CycloneDX, secure build practices, protected runners, dependency governance, and least-privilege access.
Experience with infrastructure automation and scripting using tools such as Terraform, Ansible, Helm, Bash, Python, PowerShell, or equivalent.
Ability to assess current-state architecture and produce target-state architecture, gap analysis, risk findings, improvement roadmap, and implementation runbooks.
Ability to work independently as the single primary resource for assessment, design guidance, hands-on support, documentation, workshops, and knowledge transfer.
Strong customer-facing communication skills with the ability to work with engineering, security, infrastructure, operations, service desk, and leadership stakeholders.
Other Requirements
Preferred Skills
Prior experience supporting enterprise DevSecOps platforms at large scale.
Experience with aerospace, defense, federal, regulated, or security-sensitive environments.
Experience with GitLab and Artifactory platform modernization or enterprise rollout.
Experience with Coverity and Polyspace in engineering or embedded software environments.
Experience with restricted-network, classified, or compliance-heavy environments.
Experience creating three-year modernization roadmaps for enterprise platform services.
Relevant certifications such as CKA, CKAD, CKS, GitLab certification, DevSecOps certification, CISSP, CCSP, AWS/Azure security, Kubernetes security, SRE, or equivalent.
Expected Deliverables
Current-state DevSecOps system assessment.
Availability and resiliency assessment.
EBRS / build runner scalability and concurrency analysis.
Global Active-Active architecture options analysis.
Developer experience assessment and improvement backlog.
Scalability, availability, and modernization roadmap.
Secure software supply-chain architecture review and design guidance.
Security control and pipeline integration design.
SBOM, artifact signing, and provenance strategy.
Trusted and reproducible build guidance.
CI/CD observability gap analysis.
Target-state observability architecture and design guidance.
Out-of-band monitoring strategy.
SLI / SLO framework.
Enterprise dashboard and service-health design.
Alerting and incident-detection recommendations.
Implementation runbooks.
Hands-on POC/workshop support.
Knowledge-transfer material.
Soft Skills
Strong ownership and independent execution capability.
Ability to operate as the only assigned senior resource.
Strong consulting, discovery, and stakeholder-management skills.
Ability to lead technical workshops and architecture discussions.
Strong analytical skills for identifying risks, gaps, dependencies, and improvement opportunities.
Strong documentation and presentation skills.
Ability to balance security, platform performance, developer experience, operational sustainability, and T&M project constraints.
Ability to communicate clearly with both technical and non-technical stakeholders.
Maximum Salary (US): 192000
Minimum Salary (US): 95000
#body.unify div.unify-button-container .unify-apply-now: focus, #body.unify div.unify-button-container .unify-apply-#body.unify div.unify-button-container .unify-apply-now: focus, #body.unify div.unify-button-container .unify-apply-
