CI/CD Solution Architect

nexttech

7d

About The Position

Nexttech is seeking a CI/CD Solution Architect to design and evolve secure, scalable, and standardized CI/CD solutions for enterprise applications running in a private-cloud environment based on Red Hat OpenShift. The role is intended for an experienced DevOps or platform engineering professional with strong architecture expertise, who can define end-to-end CI/CD patterns, integrate enterprise toolchains, and establish delivery, security, and governance standards for a highly regulated banking environment.

The architect will define target architectures and reusable delivery standards, integrate tools such as GitLab CI/CD, OpenShift, Argo CD, Sonatype Nexus IQ, and JFrog Artifactory, and establish GitOps, DevSecOps, security, release-management, and governance approaches. The role also addresses private-cloud and OpenShift architecture, operational resilience, and implementation planning. The architect will guide engineering teams, validate designs and integrations, support technology assessments, and communicate decisions and recommendations across technical and non-technical stakeholders.

Key deliverables include an end-to-end CI/CD target architecture; toolchain integration designs; standardized pipelines and deployment patterns; GitOps and environment-promotion models; artifact and container-image management strategies; DevSecOps controls and governance; release approval and rollback frameworks; architecture documentation and decision records; and an implementation roadmap and adoption guidance.

Requirements

• Minimum 7 years of professional experience in DevOps, CI/CD, platform engineering, or related software-delivery environments.
• Proven experience in solution architecture or technical architecture for CI/CD and platform-engineering solutions.
• Strong architecture-level knowledge of GitLab CI/CD and enterprise pipeline design.
• Strong hands-on understanding of Kubernetes and Red Hat OpenShift.
• Practical experience designing GitOps delivery models using Argo CD or equivalent tooling.
• Strong understanding of CI/CD architecture, reusable pipelines, and enterprise software-delivery patterns.
• Experience integrating artifact repositories such as JFrog Artifactory, Nexus Repository, or equivalent platforms.
• Experience with software-composition-analysis tooling such as Sonatype Nexus IQ or equivalent solutions.
• Strong understanding of artifact and container-image lifecycle management, promotion, and versioning.
• Experience designing release approval, rollback, and multi-environment deployment strategies.
• Strong knowledge of DevSecOps principles and security controls within CI/CD pipelines.
• Understanding of RBAC, secrets management, separation of duties, auditability, and controlled-release processes.
• Experience working with private-cloud infrastructure and enterprise platform constraints.
• Good understanding of high availability, scalability, disaster recovery, and operational resilience.
• Familiarity with software-supply-chain security and secure software-delivery practices.
• Ability to create clear architecture documentation, diagrams, ADRs, and technical roadmaps.
• Strong analytical thinking and ability to identify technical risks, dependencies, and architectural constraints.
• Experience working in complex, cross-functional enterprise environments.
• Strong communication, facilitation, and stakeholder-management skills.
• Ability to communicate architectural decisions clearly and provide pragmatic technical guidance to engineering teams.

Nice To Haves

• Experience in banking, financial services, or another highly regulated industry.
• Experience designing CI/CD solutions for large-scale private-cloud environments.
• Hands-on experience with Helm for Kubernetes application packaging and deployment.
• Experience with Terraform and Infrastructure as Code practices.
• Experience with Ansible or similar infrastructure-automation tooling.
• Familiarity with HashiCorp Vault or equivalent enterprise secrets-management platforms.
• Experience with Software Bill of Materials generation and management.
• Understanding of software-supply-chain security standards and secure artifact provenance.
• Experience integrating vulnerability-scanning, container-security, or policy-as-code tooling into CI/CD pipelines.
• Familiarity with enterprise change-management and release-governance processes.
• Experience supporting large-scale platform transformation or CI/CD modernization initiatives.

Responsibilities

• Define the end-to-end target architecture for CI/CD platforms and software-delivery workflows.
• Design reusable pipeline standards, deployment patterns, integration models, and architectural guidelines.
• Translate business, engineering, security, and operational requirements into scalable CI/CD architecture solutions.
• Define standardized approaches for build, test, artifact management, deployment, promotion, and release processes.
• Establish architecture principles that improve consistency, maintainability, and reuse across development teams.
• Produce architecture diagrams, solution designs, technical specifications, and Architecture Decision Records.
• Architect integration across GitLab CI/CD, OpenShift, Argo CD, Sonatype Nexus IQ, JFrog Artifactory, and related enterprise tooling.
• Define GitOps-based deployment patterns and operating models using Argo CD.
• Design artifact and container-image promotion flows across environments.
• Define release approval, rollback, and environment-promotion mechanisms aligned with enterprise governance requirements.
• Ensure clear separation between source-code management, build processes, artifact repositories, and deployment activities.
• Evaluate and recommend CI/CD and platform-engineering tooling based on technical and organizational requirements.
• Embed security controls and DevSecOps practices throughout the CI/CD lifecycle.
• Define software-composition-analysis and dependency-scanning integrations using tools such as Sonatype Nexus IQ or equivalent platforms.
• Establish security gates, release controls, and policy-enforcement mechanisms within delivery pipelines.
• Define secure secrets-management approaches and integration with enterprise secrets-management solutions.
• Design role-based access-control models, separation of duties, and auditable delivery workflows.
• Ensure CI/CD architecture aligns with enterprise security, compliance, auditability, and regulated-industry requirements.
• Contribute to software-supply-chain security standards, including SBOM generation and dependency traceability.
• Design CI/CD solutions optimized for private-cloud environments based on Kubernetes and Red Hat OpenShift.
• Define deployment, scalability, availability, and resiliency patterns for CI/CD platform components.
• Address private-cloud constraints related to networking, infrastructure, security, and platform integration.
• Define approaches for containerized application delivery across multiple environments.
• Ensure solutions meet high-availability, disaster-recovery, and operational-resilience requirements.
• Collaborate with infrastructure and platform teams on capacity, runtime, networking, and OpenShift-related architecture decisions.
• Define enterprise release-governance models covering approvals, promotion, traceability, and rollback strategies.
• Establish standardized approaches for managing releases across development, testing, and production environments.
• Design automated and controlled promotion processes for artifacts and container images.
• Define governance mechanisms that balance delivery speed with security, stability, and compliance requirements.
• Support implementation-roadmap definition and phased adoption of new CI/CD standards and platform capabilities.
• Identify architectural dependencies, technical risks, and constraints affecting platform and application delivery.
• Guide engineering teams during implementation and ensure solutions remain aligned with the target architecture.
• Validate technical designs, implementation approaches, and toolchain integrations.
• Collaborate with platform, infrastructure, security, development, and architecture teams.
• Facilitate technical discussions and support critical architecture decisions across multiple stakeholders.
• Contribute to proof-of-concepts, feasibility studies, technology assessments, and tool evaluations.
• Provide technical mentoring and support adoption of CI/CD, GitOps, and DevSecOps best practices.
• Communicate architecture decisions, trade-offs, and implementation recommendations clearly to technical and non-technical stakeholders.

Benefits

• A culture that encourages work-life balance and independence at work.
• A collaborative and responsible team that values fun, autonomy, and flexibility.
• Support from peers and leadership to help employees grow.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed