Senior DevSecOps Architect

Position: Senior DevSecOps Architect

Location: Montreal, QC (Remote)

Employment Type: Full-Time

Experience Required: 10 + Years

Job Summary:

We are seeking a Senior DevSecOps Architect to lead enterprise DevSecOps architecture, governance, automation, and secure software delivery across Agile Release Trains. The ideal candidate will combine strong hands-on engineering expertise with enterprise-level architecture and security leadership.

Key Responsibilities:

• Architect and govern enterprise DevSecOps platforms, CI/CD pipelines, and delivery standards.
• Design and build POCs, reusable YAML pipelines, automation, and platform solutions.
• Implement secure CI/CD, branching, release, approval, and governance frameworks.
• Lead container security, including image scanning, signing, SBOMs, provenance, and vulnerability management.
• Design secure Kubernetes/GKE deployment patterns using Helm, GitOps, admission controls, and Workload Identity.
• Govern Sonatype Nexus for artifact, dependency, repository, and lifecycle management.
• Integrate SAST, SCA, secrets, IaC, container scanning, attestations, and policy enforcement.
• Support risk assessments, audits, compliance, architecture reviews, and remediation.
• Evaluate AI-assisted DevSecOps tools to improve automation, testing, documentation, and vulnerability management.
• Mentor application, platform, and DevSecOps teams and drive enterprise best practices.

Required Skills:

• 10+ years of experience in DevOps, DevSecOps, Cloud, or Software Engineering.
• Strong expertise in CI/CD, Azure DevOps/Git, YAML, Kubernetes/GKE, Docker, Helm, and GitOps.
• Experience with Sonatype Nexus and software supply-chain security.
• Hands-on knowledge of SAST, SCA, IaC, secrets, container security, SBOM, signing, and vulnerability management.
• Strong understanding of cloud security, automation, governance, and enterprise architecture.
• Excellent communication, leadership, and stakeholder-management skills.