Sr. DevSecOps Architect

Senior DevSecOps Architect Senior DevSecOps Architect responsible for building and operating secure cloud architecture, DevSecOps practices, and governance that enable engineering teams to deliver applications rapidly and securely. Day-to-Day Responsibilities: Secure and continuously improve AWS cloud infrastructure and security posture. Implement and maintain AWS security controls, including IAM, Security Hub, GuardDuty, Config, CloudTrail, KMS, and VPC security. Integrate SAST, SCA, and DAST security scanning into CI/CD pipelines. Partner with developers to identify, prioritize, and remediate security vulnerabilities. Build automated security controls, remediation workflows, and policy-as-code. Develop and maintain Terraform or similar infrastructure-as-code solutions. Use Python, Go, Bash, or similar scripting to automate deployment and security processes. Support vulnerability management, threat modeling, incident response, and root-cause analysis. Help establish security architecture and governance for AI/LLM-powered applications. Evaluate security risks associated with new platforms, tools, and third-party integrations. Collaborate with engineering, infrastructure, and security teams to embed security throughout the development lifecycle. Minimum Requirements: 8+ years of experience in cloud security, DevSecOps, security engineering, or a related field. Architect-level experience with a strong security focus. Deep hands-on AWS security experience, including IAM, Security Hub, GuardDuty, Config, CloudTrail, KMS, and VPCs. Experience securing CI/CD pipelines and implementing SAST, SCA, and DAST. Experience with Terraform or similar infrastructure-as-code tooling. Strong scripting or coding ability with Python, Go, Bash, or similar languages. Experience partnering with development teams in greenfield or rapidly evolving environments. Strong understanding of vulnerability management, threat modeling, and cloud-native security. Ability to balance security requirements with development velocity. Strong communication skills and the ability to explain technical security risks to business and technical stakeholders. Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field. Preferred Qualifications: Experience securing AI/LLM-powered applications or agentic systems. CrowdStrike experience. Zscaler experience. ISO 27001, SOC 2, or similar compliance experience. Experience with Docker, Kubernetes, ECS, or EKS. AWS Security Specialty, CISSP, CCSP, or equivalent certification. Manufacturing, industrial, or complex B2B technology experience. Experience in global or multi-region cloud environments. Familiarity with Model Context Protocol (MCP) and emerging AI security considerations. Mondo