Associate Director, DevSecOps Architect

OSTTRA•Princeton, NJ

About The Position

The DevSecOps Architect provides enterprise-level technical leadership for secure software delivery, cloud-native platforms, and developer enablement. The role defines DevSecOps strategy, reference architectures, engineering standards, and reusable platform capabilities that integrate security throughout the software development lifecycle. The architect partners with engineering, cybersecurity, infrastructure, risk, and business leaders to improve delivery speed, resilience, compliance, and developer experience. The position is part of the Corporate Technology team, which serves as the centralized platform engineering function. The team establishes enterprise-wide DevSecOps standards and architectural patterns to support secure, scalable software delivery across business units, and enables global development teams through standardized platforms, governance frameworks, and open-source solutions. The role leads enterprise DevSecOps architecture, embeds automated security controls, governs developer tooling and platform standards, and guides architecture reviews and platform decisions. It also promotes measurable reliability and operational readiness, mentors architects and engineers, and advances enterprise adoption of secure delivery practices.

Requirements

At least 7 years of experience in DevSecOps, cloud architecture, platform engineering, or cybersecurity engineering.
Demonstrated leadership of enterprise-scale DevSecOps transformation initiatives or large-scale platform architecture programs.
Hands-on production experience designing and operating enterprise CI/CD pipelines using Git-based source control platforms, artifact management repositories, container orchestration technologies such as Kubernetes, and infrastructure-as-code tooling such as Terraform.
Experience with version control discipline and automated policy validation at scale.
Production experience embedding automated SDLC security controls, including SAST/DAST code analysis, software composition analysis, secrets detection, container image scanning, and policy-as-code enforcement such as OPA or Kyverno.
Hands-on production experience with at least one major cloud platform: AWS, Azure, or GCP.
Cloud platform experience including cloud-native IAM, secrets management platforms such as HashiCorp Vault or AWS Secrets Manager, network security, and vulnerability management in regulated or enterprise-scale environments.
Bachelor’s degree in computer science, engineering, cybersecurity, information systems, or equivalent practical experience.

Nice To Haves

Experience in a regulated or security-sensitive enterprise environment, such as financial services or fintech.
Experience with managed container orchestration services such as Amazon EKS in production enterprise environments.
Experience with zero-trust architecture principles, SRE practices, and developer self-service platform design.
Relevant certifications in cloud security, container orchestration, DevOps, or cybersecurity, such as AWS Security Specialty, CKS, or CISSP, or equivalent.
Experience with software supply-chain security practices and observability or SIEM platform integration.
Experience evaluating or implementing AI-assisted development tooling or automated security operations within DevSecOps pipelines.

Responsibilities

Define and lead the enterprise DevSecOps architecture, roadmap, and adoption strategy, including secure, scalable CI/CD patterns and paved-road developer capabilities across cloud, hybrid, container, and orchestration environments.
Establish governance models that drive consistent DevSecOps adoption across engineering value streams.
Embed automated security controls throughout the software development lifecycle, including code analysis, software composition analysis, secrets detection, artifact integrity verification, container scanning, infrastructure-as-code policy scanning, and runtime protection.
Translate cybersecurity and compliance control requirements into automated, auditable guardrails.
Establish and govern architecture standards for source control, build automation, artifact management, release orchestration, observability, vulnerability management, and software supply-chain security.
Provide authoritative technical direction across developer tooling platforms and self-service capabilities.
Lead architecture reviews, threat modeling sessions, design decisions, and proofs of concept.
Author reference architectures, engineering standards, architecture decision records, and roadmaps to support evidence-based platform decisions by engineering and senior leadership.
Drive platform reliability, resilience, and operational readiness through measurable engineering practices.
Define and monitor DORA metrics and other measures, including deployment frequency, lead time, change failure rate, mean time to recovery, security findings density, and developer productivity benchmarks.
Mentor architects and engineers and build communities of practice to accelerate enterprise-wide DevSecOps adoption.
Influence senior stakeholders without direct authority and advance developer experience so secure delivery is the default.