Senior Cloud Migration & DevSecOps Architect

Cloud Migration & DevSecOps Architect

LOCATION: Colombia

WORK MODALITY: 100% Remote

CONTRACT TYPE: Contract

DESCRIPTION

We are seeking an accomplished Senior Cloud Migration & DevSecOps Architect with extensive experience in cloud infrastructure, application modernization, and enterprise DevSecOps practices across Microsoft Azure and Amazon Web Services (AWS) .

This position is ideal for a highly technical professional who combines strong software architecture knowledge with hands-on expertise in cloud migration, Kubernetes, containerization, and CI/CD automation.

The selected candidate will be responsible for designing secure, scalable, and resilient cloud solutions, modernizing legacy applications, and implementing automated deployment strategies. The role requires close collaboration with cross-functional engineering teams to establish cloud-native architecture standards, strengthen security practices, and enhance application performance and reliability.

KEY RESPONSIBILITIES

• Cloud Architecture & Modernization: Design and implement scalable cloud-native architectures across Azure and AWS, supporting the transformation of legacy and monolithic applications into modern, containerized, microservices-based solutions.
• CI/CD Pipeline Development: Design, develop, and maintain YAML-based Continuous Integration and Continuous Deployment pipelines using Azure DevOps for Angular, Ionic, .NET Framework, and modern .NET applications.
• Containerization & Orchestration: Automate Docker image creation, versioning, and publishing to Azure Container Registry (ACR) and Amazon Elastic Container Registry (ECR). Manage application deployments using Azure Kubernetes Service (AKS) and Amazon Elastic Kubernetes Service (EKS).
• Infrastructure & Deployment Automation: Implement automated deployment workflows, Helm Charts, environment configurations, and infrastructure management practices to improve consistency and operational efficiency.
• DevSecOps & Security: Integrate security controls throughout the software development lifecycle, including automated code analysis, container vulnerability scanning, secrets management, and secure deployment practices.
• Application Architecture: Support the adoption of microservices, event-driven architecture, REST APIs, and modern software design principles to improve maintainability, scalability, and resilience.
• Observability & Monitoring: Implement monitoring, logging, distributed tracing, and application performance management solutions to improve visibility across cloud infrastructure and Kubernetes workloads.
• Architecture Standards & Best Practices: Establish and maintain standards for cloud security, application architecture, infrastructure automation, deployment processes, and observability.
• Cross-Functional Collaboration: Partner with development, infrastructure, and engineering teams to identify modernization opportunities, resolve technical challenges, and improve deployment reliability.
• Continuous Improvement: Evaluate existing cloud environments, application architectures, and delivery processes to identify opportunities for optimization, automation, and enhanced security.

REQUIREMENTS

Cloud Platforms & Infrastructure

Microsoft Azure

Strong technical knowledge and hands-on experience with Azure cloud services, including:

• Networking & API Management: Azure Front Door, API Management (APIM), and Application Gateway.
• Identity & Access Management: Microsoft Entra ID and Microsoft Entra External ID.
• Containers & Service Mesh: Azure Kubernetes Service (AKS) and Istio Service Mesh.
• Messaging & Integration: Azure Event Grid and Azure Service Bus.
• Compute & Storage: Azure Blob Storage, Azure App Services, and Azure Functions.
• Databases: Azure Cosmos DB and Azure SQL Managed Instance Pool.
• Monitoring & Security: Azure Application Insights and Azure Key Vault.
• DevOps: Azure DevOps and Azure Container Registry (ACR).

Amazon Web Services (AWS)

Strong technical knowledge and practical experience with AWS cloud services, including:

• Networking & API Management: Amazon CloudFront, AWS Global Accelerator, Amazon API Gateway, and Application Load Balancer (ALB).
• Identity & Access Management: AWS IAM Identity Center and Amazon Cognito.
• Containers & Service Mesh: Amazon Elastic Kubernetes Service (EKS) and AWS App Mesh.
• Messaging & Integration: Amazon EventBridge, Amazon Simple Queue Service (SQS), and Amazon Simple Notification Service (SNS).
• Compute & Storage: Amazon S3, AWS Elastic Beanstalk, and AWS Lambda.
• Databases: Amazon DynamoDB, Amazon RDS, and Amazon Aurora.
• Monitoring & Security: Amazon CloudWatch, AWS X-Ray, and AWS Secrets Manager.
• Container Management: Amazon Elastic Container Registry (ECR).

Software Development & Architecture

• Strong understanding of full-stack application development using Angular, Ionic, .NET Framework, and .NET 6/8 or later .
• Experience designing and implementing RESTful APIs, background processing services, and gRPC-based communication.
• Solid knowledge of microservices, Clean Architecture, Hexagonal Architecture, and Event-Driven Architecture .
• Understanding of SOLID principles and established software design patterns, including Repository, Unit of Work, Saga, Outbox, API Gateway, and Publish/Subscribe.
• Familiarity with Domain-Driven Design (DDD) and Command Query Responsibility Segregation (CQRS).
• Experience applying cloud-native architectural principles to application modernization initiatives.

DevSecOps, CI/CD & Container Orchestration

• Demonstrated experience building, maintaining, and optimizing YAML-based CI/CD pipelines in Azure DevOps.
• Advanced knowledge of Docker containerization and Kubernetes orchestration, particularly AKS and EKS.
• Experience managing deployments, application configuration, and environment variables using Helm Charts and Azure DevOps Libraries.
• Understanding of GitOps methodologies and automated deployment strategies.
• Experience integrating container security, static code analysis, and vulnerability management into CI/CD workflows.
• Familiarity with security and code quality tools such as SonarQube, Checkmarx, Snyk, and Trivy .
• Knowledge of cloud security practices, access management, secrets management, and secure infrastructure configurations.

Monitoring & Observability

• Experience implementing application and infrastructure monitoring across cloud environments.
• Knowledge of OpenTelemetry, Dynatrace, and distributed tracing technologies.
• Experience configuring observability solutions for Kubernetes-based applications.
• Ability to identify performance bottlenecks, monitor distributed services, and support application reliability through proactive monitoring.

PREFERRED EXPERIENCE

• Demonstrated experience working with both Microsoft Azure and AWS in complex cloud environments.
• Proven participation in cloud migration, application modernization, or cloud-native transformation initiatives.
• Hands-on experience transitioning legacy or monolithic applications into containerized, microservices-based architectures.
• Experience implementing secure, scalable, and automated CI/CD pipelines for enterprise applications.
• Proven ability to define or implement cloud architecture, DevSecOps, infrastructure automation, and observability standards.
• Strong analytical, troubleshooting, and problem-solving capabilities.
• Ability to collaborate effectively with multidisciplinary technical teams and communicate architectural decisions clearly.

At ttg, 'We believe in making a difference One Person at a Time,' ttg OPT.