Lead DevSecOps Engineer

Job description

ABOUT THE ROLE

As a Cloud Security Architect, you will join SoftServe’s Critical Services Center of Excellence and Cybersecurity Practice, working with global clients to design, implement, and improve security for cloud-native and distributed environments. In this role, you will help organizations strengthen their security posture by delivering secure-by-design solutions across public, private, and hybrid cloud platforms. You will engage throughout the entire project lifecycle, from pre-sales consulting and architecture design to implementation and continuous improvement.

RESPONSIBILITIES

- Design and implement security measures across the full Software Development Lifecycle (SDLC), including requirements, design, development, testing, and deployment

- Lead the design and delivery of secure cloud-native architectures following Secure by Design principles

- Act as a key technical advisor during pre-sales engagements and project delivery

- Collaborate with clients to understand business and security requirements, define target architectures, develop prototypes, and support implementation activities

- Perform threat modeling and define security architecture requirements for development and product teams

- Implement and manage scalable Identity and Access Management (IAM) guardrails across Azure, AWS, and GCP environments

- Develop and execute data protection initiatives, including encryption, key management, and tokenization strategies

- Create and maintain secure configurations for containerized platforms (Kubernetes, EKS) and Infrastructure as Code (Terraform) environments

- Assess cloud environments, identify security risks, and drive remediation initiatives for public and hybrid cloud solutions

- Stay current with emerging security threats, vulnerabilities, and cloud security trends, providing recommendations for risk mitigation and security enhancements

- Promote security awareness across organizations by conducting workshops, training sessions, and secure coding education programs

- Collaborate with cross-functional and geographically distributed teams to deliver world-class cybersecurity solutions

REQUIREMENTS

- 3+ years of hands-on experience in Cloud Security-focused roles, delivering security solutions for cloud-native and distributed architectures in complex environments

- Strong expertise in major cloud platforms, particularly Azure and AWS

- Good understanding of cloud technologies, virtualization, containers, service mesh architectures, and cloud orchestration tools, including Kubernetes, Docker, VMware, GCP, and related platforms

- Proven experience in the assessment, implementation, optimization, troubleshooting, and documentation of security controls across SaaS, PaaS, and IaaS environments

- Strong knowledge of cloud security domains, including IAM, network security, cryptography, key management, data protection, and Secure Software Development Lifecycle (SSDLC)

- Experience identifying, assessing, and remediating security risks in public and hybrid cloud environments

- Practical expertise in threat modeling and translating security requirements into actionable guidance for engineering teams

- Knowledge of industry trends and best practices related to public, private, and hybrid cloud security

- Relevant industry certifications such as CCSP, CISSP, CSSLP, or equivalent are highly preferred

- Strong stakeholder management skills with the ability to influence decisions and build trusted relationships

- Proactive, self-driven mindset with excellent problem-solving capabilities

- Excellent verbal and written communication skills, with the ability to lead discussions and influence distributed teams

- Upper-Intermediate or higher level of English proficiency, with confidence working in multicultural and international environments