Platform & DevSecOps Delivery Architect

Harris Computer • Washington, NV

1d • Remote

About The Position

STChealth is seeking a Platform & DevSecOps Delivery Architect to act as the primary owner and builder of their modern "Golden Path" deployment platform. This role focuses on building an automated, secure, self-service software delivery platform that makes shipping safe, compliant code effortless for development teams. The architect will bridge the high-throughput modern platform and existing production systems, ensuring every build meets rigorous DevSecOps and Operational Readiness standards. The ideal candidate loves clean pipeline architecture, automated security rails, and solving complex distributed systems puzzles with a high degree of autonomy.

Requirements

• 5+ years of hands-on experience in Platform Engineering, DevOps, or Site Reliability Engineering (SRE), with demonstrated experience designing and standardizing enterprise CI/CD pipelines.
• Deep hands-on proficiency with Amazon Web Services (AWS) and Kubernetes (Amazon EKS), including container networking, pod security, and Helm chart lifecycle management.
• Practical experience with GitOps controllers (ArgoCD, Flux) and automated canary deployment strategies (Argo Rollouts, weighted ingress, or ALB traffic shifting).
• Practical software development experience with C# / .NET, Node.js, and Python to build internal tooling, automate platform interfaces, and understand service-level application code.
• Hands-on experience engineering self-hosted AI architecture, including AI model gateways, intelligent request routing, and orchestrating multi-step agentic workflows.
• Working knowledge of VM-based delivery concepts (HashiCorp Packer, EC2 Launch Templates, Cloud-Init, or rolling agent deployments).
• Experience integrating security scanning tools (Trivy, Snyk, SonarQube, AWS Inspector, or similar) directly into deployment workflows as non-negotiable quality gates.
• Solid experience authoring modular, maintainable Terraform or Pulumi definitions.
• Deep curiosity and practical capability with emerging technologies—both in leveraging AI-assisted development tools (copilots, chat assistants) to accelerate operational toil, and in architecting scalable infrastructure for AI-driven workloads.

Nice To Haves

• Experience working inside AWS GovCloud (aws-us-gov partition) and navigating GovCloud IAM/IRSA partition boundaries.
• Background in HIPAA-regulated, HITRUST, or public-sector SaaS data environments.
• Experience building and deploying backend services or automated agent frameworks in C# (.NET Core), Python, or Node.js/TypeScript.
• Experience deploying and managing vector databases (e.g., Qdrant, pgvector) and embedding inference pipelines in containerized environments.

Responsibilities

• Architect, implement, and maintain centralized, reusable CI/CD pipeline templates (GitHub Actions / GitLab CI) that abstract underlying infrastructure away from software developers.
• Build a modular release architecture that runs universal scanning and sanitization upstream, while intelligently branching to specific downstream delivery targets: Modern Engine (GitOps promotion with progressive canary rollouts to Amazon EKS) and Core VM Engine (Automated machine-image pipelines and blue/green agent updates for state production systems).
• Provide engineering teams with pre-configured project scaffolding and Helm/IaC modules so they can stand up new services independently within compliant guardrails.
• Embed automated vulnerability scanning directly into the build process: SAST and SCA dependency checks, container image hygiene and snapshot CVE detection, and pre-commit and pipeline secret-detection.
• Build automated generation of software artifacts and deployment logs to satisfy strict SOC 2 Type II, HIPAA, and federal public-health security audits.
• Design and operate programmatic secrets distribution via External Secrets Operator (ESO) syncing from AWS Secrets Manager / Parameter Store backed by least-privilege IAM roles.
• Partner with Engineering leads to ensure no service reaches staging or production without meeting automated operational standards.
• Ensure all platform templates integrate standardized OpenTelemetry (OTel) instrumentation for logging, distributed tracing, and metrics.
• Embed client-side sanitization checks into build and logging pipelines to verify Protected Health Information (PHI) and PII are redacted before data reaches centralized collectors.
• Architect and operate secure, compliant private AI infrastructure—including self-hosted AI gateways, traffic routing, rate limiting, and private cloud-hosted LLM endpoints.
• Design, deploy, and support scalable execution environments for autonomous agentic workflows, orchestrating multi-agent pipelines, vector storage integration, and operational context retrieval.

Benefits

• 100% Remote Flexibility: Work from home anywhere within the United States.
• Comprehensive Day-One Benefits: Medical, Dental, and Vision coverage starting on your first day of employment.
• Retirement & Equity Programs: 401(k) matching program and Constellation Software employee stock ownership opportunities.
• Work-Life Balance: 3 weeks of vacation, 5 personal days, and company-recognized holidays.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed