DevSecOps Architect

Role: DevSecOps Architect

Location: Remote

Key Responsibilitie

• sLead the deployment and operationalization of Socket.dev across enterprise development environments
• .Implement software dependency security controls and open-source governance processes
• .Support Chainguard implementation and adoption of hardened container images
• .Migrate legacy container images to secure, hardened Chainguard images
• .Integrate security controls into CI/CD pipelines and developer workflows
• .Implement automated security checks, policy enforcement, and compliance controls
• .Secure Kubernetes, Docker, and other containerized environments
• .Implement container image scanning, signing, and provenance validation
• .Develop and maintain SBOM strategies and software supply chain governance
• .Partner with development and platform engineering teams to identify and remediate security risks
• .Provide technical guidance, documentation, standards, and operational runbooks
• .Support secure SDLC, vulnerability remediation, and software supply chain security initiatives

.Required Qualification

• s10+ years of experience in DevOps, DevSecOps, Application Security, or Cloud Security
• .Hands-on experience with software supply chain security and dependency management
• .Strong understanding of CI/CD pipelines and secure development practices
• .Experience with GitHub, GitLab, Azure DevOps, or similar platforms
• .Strong experience with Kubernetes and containerized environments
• .Experience with Software Composition Analysis (SCA) and vulnerability remediation
• .Knowledge of SBOM, container image security, and open-source security

.