DevSecOps Architect

Home > Python programming jobs

DevSecOps Architect in USA

New Era Technology
Full time
Email

USA
10/27/2026
Report

Remote

Responsibilities

Design and implement software supply chain security controls across build and release pipelines.
Secure GitHub and GitLab environments through branch protection, signed commits, access controls, and provenance attestation.
Generate, validate, and distribute SBOMs using Syft, CycloneDX, or SPDX.
Integrate dependency scanning and vulnerability management into CI/CD pipelines.
Implement artifact signing and verification with Sigstore, Cosign, or in-toto.
Develop and enforce security-as-code and policy-as-code controls using OPA, Kyverno, or Conftest.
Secure Kubernetes-based build and deployment environments, including admission control, network policies, and workload hardening.
Conduct threat modeling for CI/CD pipelines, infrastructure, and AI-assisted development workflows.
Assess risks from open-source dependencies, AI-generated code, and AI coding assistants.
Align security practices with SLSA, NIST SSDF, and NIST SP 800-218.
Create security documentation, reference architectures, runbooks, and audit evidence.
Collaborate with security, engineering, platform, and compliance teams.

Requirements

5–8 years of experience in DevSecOps, application security, or platform engineering with direct ownership of CI/CD security.
Hands-on experience with GitHub Actions, GitLab pipelines, and enterprise-scale repository administration.
Experience generating and managing SBOMs using SPDX or CycloneDX.
Knowledge of SLSA, NIST SSDF, and NIST SP 800-218.
Experience with artifact signing, provenance, and verification tools such as Sigstore, Cosign, or in-toto.
Hands-on Kubernetes security experience, including admission control, network policies, and workload hardening.
Experience with policy-as-code tools such as OPA, Kyverno, or Conftest.
Understanding of STRIDE or attack-tree threat modeling methodologies.
Scripting proficiency in Python, Bash, or Go.
Familiarity with Docker, OCI images, container registries, and container security.
Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience.
Preferred qualifications include experience with AWS, Azure, or Google Cloud; vulnerability management tools such as Snyk or Dependency-Track; enterprise or regulated software environments; and consulting or contract work supporting distributed engineering teams.

Benefits

Remote position with regular overlap during US business hours required for cross-team collaboration.
No routine travel is identified.
Competitive benefits, continuous training, and professional development opportunities are offered.

Salary: Competitive

New Era Technology

New Era Technology is the AI, application, and infrastructure partner that simplifies, secures, and scales technology across modern work environments. New Era Technology simplifies, secures, and scales modern technology environments, with offices in the Americas, EMEA, and APAC. New Era provides ...

Similar positions

Software Architect/Engineer 6

Netflix
Full time

USA
10/30/2026
Salary: $499k-$820k

Remote

Senior Solutions Architect

MongoDB
Full time

Remote
10/30/2026

Singapore

Solutions Architect

Syms Strategic Group, LLC (SSG)
Full time

Remote
10/29/2026
Salary: $109k-$126k

United States

Principal AI Solutions Architect

Genesys
Full time

Remote
10/29/2026

Netherlands

Principal Data Architect

Massive Rocket
Full time

Remote
10/28/2026

South America