CI/CD Solution Architect

About Nexttech

Founded in 2015, Nexttech has built a solid foundation in delivering comprehensive IT solutions tailored to meet diverse client needs. With expertise spanning five key industry sectors—Banking, Energy, Telecom, Automotive and E-commerce & Logistics—we provide nearshore and onshore services designed to drive efficiency and support strategic growth.

Our team supports every phase of the Software Development Life Cycle (SDLC), from developing detailed roadmaps and resolving complex software challenges to ensuring quick time-to-market and optimized ROI.

Our Core Services:

• Managed Services: End-to-end support for seamless IT operations.

• Custom Software Development: Tailored solutions to address specific business challenges.

• Team Augmentation: Enhance your in-house capabilities with specialized expertise.

• Nearshoring Services: Collaborative solutions that offer the benefits of proximity and cultural alignment.

• Dedicated Development Teams: Aligned teams committed to your project’s long-term success.

• Quality Assurance & Testing: Ensuring high-quality performance and reliability.

• Consulting and Advisory Services: Expert insights to help navigate complex projects and decisions.

At Nexttech, we take pride in our commitment to client success, fostering trusted partnerships, and delivering solutions that align with each client’s unique goals and vision.

JOB DESCRIPTION

We are looking for a CI/CD Solution Architect to design and evolve secure, scalable and standardized CI/CD solutions for enterprise applications running in a private-cloud environment based on Red Hat OpenShift. This role is ideal for an experienced DevOps or platform engineering professional with strong architecture expertise, capable of defining end-to-end CI/CD patterns, integrating enterprise toolchains and establishing robust delivery, security and governance standards in a highly regulated banking environment.

Main tech: #GitLabCICD #OpenShift #Kubernetes #ArgoCD #GitOps #NexusIQ #JFrogArtifactory #DevSecOps #Helm #Terraform

Key Responsibilities****CI/CD Architecture & Standardization

• Define the end-to-end target architecture for CI/CD platforms and software-delivery workflows

• Design reusable pipeline standards, deployment patterns, integration models and architectural guidelines

• Translate business, engineering, security and operational requirements into scalable CI/CD architecture solutions

• Define standardized approaches for build, test, artifact management, deployment, promotion and release processes

• Establish architecture principles that improve consistency, maintainability and reuse across development teams

• Produce architecture diagrams, solution designs, technical specifications and Architecture Decision Records

Toolchain Integration & GitOps

• Architect integration across GitLab CI/CD, OpenShift, Argo CD, Sonatype Nexus IQ, JFrog Artifactory and related enterprise tooling

• Define GitOps-based deployment patterns and operating models using Argo CD

• Design artifact and container-image promotion flows across environments

• Define release approval, rollback and environment-promotion mechanisms aligned with enterprise governance requirements

• Ensure clear separation between source-code management, build processes, artifact repositories and deployment activities

• Evaluate and recommend appropriate CI/CD and platform-engineering tooling based on technical and organizational requirements

DevSecOps, Security & Governance

• Embed security controls and DevSecOps practices throughout the CI/CD lifecycle

• Define software-composition-analysis and dependency-scanning integration using tools such as Sonatype Nexus IQ or equivalent platforms

• Establish security gates, release controls and policy-enforcement mechanisms within delivery pipelines

• Define secure secrets-management approaches and integration with enterprise secrets-management solutions

• Design role-based access-control models, separation of duties and auditable delivery workflows

• Ensure CI/CD architecture aligns with enterprise security, compliance, auditability and regulated-industry requirements

• Contribute to software-supply-chain security standards, including SBOM generation and dependency traceability

Private Cloud & OpenShift Architecture

• Design CI/CD solutions optimized for private-cloud environments based on Kubernetes and Red Hat OpenShift

• Define deployment, scalability, availability and resiliency patterns for CI/CD platform components

• Address private-cloud constraints related to networking, infrastructure, security and platform integration

• Define appropriate approaches for containerized application delivery across multiple environments

• Ensure solutions meet high-availability, disaster-recovery and operational-resilience requirements

• Collaborate with infrastructure and platform teams on capacity, runtime, networking and OpenShift-related architecture decisions

Release Management & Delivery Governance

• Define enterprise release-governance models covering approvals, promotion, traceability and rollback strategies

• Establish standardized approaches for managing releases across development, testing and production environments

• Design automated and controlled promotion processes for artifacts and container images

• Define governance mechanisms that balance delivery speed with security, stability and compliance requirements

• Support implementation-roadmap definition and phased adoption of new CI/CD standards and platform capabilities

• Identify architectural dependencies, technical risks and constraints affecting platform and application delivery

Technical Leadership & Delivery Support

• Guide engineering teams during implementation and ensure solutions remain aligned with the target architecture

• Validate technical designs, implementation approaches and toolchain integrations

• Collaborate closely with platform, infrastructure, security, development and architecture teams

• Facilitate technical discussions and support critical architecture decisions across multiple stakeholders

• Contribute to proof-of-concepts, feasibility studies, technology assessments and tool evaluations

• Provide technical mentoring and support adoption of CI/CD, GitOps and DevSecOps best practices

• Communicate architecture decisions, trade-offs and implementation recommendations clearly to technical and non-technical stakeholders

What will drive your success?

• Minimum 7 years of professional experience in DevOps, CI/CD, platform engineering or related software-delivery environments

• Proven experience in solution architecture or technical architecture for CI/CD and platform-engineering solutions

• Strong architecture-level knowledge of GitLab CI/CD and enterprise pipeline design

• Strong hands-on understanding of Kubernetes and Red Hat OpenShift

• Practical experience designing GitOps delivery models using Argo CD or equivalent tooling

• Strong understanding of CI/CD architecture, reusable pipelines and enterprise software-delivery patterns

• Experience integrating artifact repositories such as JFrog Artifactory, Nexus Repository or equivalent platforms

• Experience with software-composition-analysis tooling such as Sonatype Nexus IQ or equivalent solutions

• Strong understanding of artifact and container-image lifecycle management, promotion and versioning

• Experience designing release approval, rollback and multi-environment deployment strategies

• Strong knowledge of DevSecOps principles and security controls within CI/CD pipelines

• Understanding of RBAC, secrets management, separation of duties, auditability and controlled-release processes

• Experience working with private-cloud infrastructure and enterprise platform constraints

• Good understanding of high availability, scalability, disaster recovery and operational resilience

• Familiarity with software-supply-chain security and secure software-delivery practices

• Ability to create clear architecture documentation, diagrams, ADRs and technical roadmaps

• Strong analytical thinking and ability to identify technical risks, dependencies and architectural constraints

• Experience working in complex, cross-functional enterprise environments

• Strong communication, facilitation and stakeholder-management skills

• Ability to communicate architectural decisions clearly and provide pragmatic technical guidance to engineering teams

Nice to Have

• Experience in banking, financial services or another highly regulated industry

• Experience designing CI/CD solutions for large-scale private-cloud environments

• Hands-on experience with Helm for Kubernetes application packaging and deployment

• Experience with Terraform and Infrastructure as Code practices

• Experience with Ansible or similar infrastructure-automation tooling

• Familiarity with HashiCorp Vault or equivalent enterprise secrets-management platforms

• Experience with Software Bill of Materials generation and management

• Understanding of software-supply-chain security standards and secure artifact provenance

• Experience integrating vulnerability-scanning, container-security or policy-as-code tooling into CI/CD pipelines

• Familiarity with enterprise change-management and release-governance processes

• Experience supporting large-scale platform transformation or CI/CD modernization initiatives

Key Deliverables

• End-to-end CI/CD target architecture aligned with enterprise and private-cloud standards

• Toolchain integration designs across GitLab CI/CD, OpenShift, Argo CD, Nexus IQ, Artifactory and related platforms

• Standardized CI/CD pipelines and reusable application-deployment patterns

• GitOps architecture and environment-promotion model

• Artifact and container-image management and promotion strategy

• DevSecOps security-control and governance model

• Release approval, rollback and environment-governance framework

• Architecture diagrams, solution-design documents and Architecture Decision Records

• Technical implementation roadmap and adoption guidelines for engineering teams