Job Title

Job Description

JD - DevSecOps Architect

Job Description

We are looking for a highly experienced DevSecOps Architect to lead enterprise DevSecOps and platform engineering strategy across cloud-native engineering teams. This role owns the design, governance, and evolution of secure, scalable, reusable platform capabilities that enable standardized self-service delivery, improve developer productivity, and accelerate high-quality software releases.

The DevSecOps Architect will provide technical leadership across CI/CD, GitOps, cloud infrastructure, Kubernetes platforms, security integration, observability, compliance automation, and AI-augmented engineering practices. The role requires strong architectural thinking, hands-on engineering depth, excellent communication skills, stakeholder influence, and the ability to translate complex platform and security needs into practical, business-aligned engineering solutions.

Education:

• Bachelors or master’s in engineering, MCA, M.Sc. in Computer Science, IT
• Relevant certifications in cloud, DevSecOps, Kubernetes, security, architecture, or platform engineering are preferred.

Experience:

• 15+ years of IT experience with strong expertise in DevSecOps, platform engineering, cloud infrastructure, CI/CD automation, release engineering, security integration, observability, and enterprise-scale engineering enablement.

Key Areas of Responsibility:

• Architect and govern enterprise DevSecOps and platform engineering strategy, including scalable platforms, reusable frameworks, golden paths, self-service enablement, and standardized developer workflows.
• Design and lead CI/CD ecosystems using GitHub Actions and Azure Pipelines to improve release reliability, traceability, and consistency.
• Drive automation across the software delivery lifecycle, including workflow automation, reusable tool chains, policy-as-code, automated controls, and DevSecOps metrics.
• Architect cloud-native infrastructure using Terraform, Kubernetes, EKS, Helm, Argo CD, Karpenter, Docker, and GitOps operating models.
• Integrate security and compliance into engineering platforms using tools and practices such as Fortify, GitHub Advanced Security, Secret Scanning, Black Duck, Dependabot, Kyverno, Cilium, RBAC, least privilege access, and secure SDLC controls.
• Define observability and reliability practices using Prometheus, Grafana, Tempo, Loki, alerting, incident response, root cause analysis, SRE practices, and platform health monitoring.
• Provide architectural guidance and enablement to R&D, platform, security, and engineering teams through mentoring, governance, standards definition, documentation, and stakeholder collaboration.

Role Competency:

• Deep expertise in DevSecOps, platform engineering, cloud-native architecture, CI/CD automation, GitOps, release engineering, security integration, and operational excellence.
• Strong scripting and automation skills using Python, Shell scripting, PowerShell, and workflow automation approaches.
• Hands-on experience designing enterprise CI/CD pipelines, reusable automation frameworks, branching strategies, release orchestration, deployment governance, and configuration management.
• Strong experience with AWS cloud infrastructure, Infrastructure as Code using Terraform, containers, Kubernetes/EKS, Helm, ArgoCD, autoscaling, workload optimization, disaster recovery, resilience engineering, and infrastructure standardization.
• Deep expertise in AWS cloud architecture, enterprise-scale platform design, multi-account strategy, landing zones, VPC networking, IAM governance, security guardrails, and cloud operations.
• Hands-on experience with AWS services such as EKS, EC2, VPC, IAM, S3, RDS, Lambda, CloudWatch, Route53, SNS, SQS, KMS, Secrets Manager, WAF, GuardDuty, Security Hub, and CloudTrail.
• Strong understanding of AWS Well-Architected Framework, cloud security best practices, reliability engineering, operational excellence, performance efficiency, FinOps, and cost optimization.
• Experience with engineering quality and security platforms such as SonarQube, CodeScene, Fortify, GitHub Advanced Security, Black Duck, Dependabot, Artifactory, Nexus, and GitHub Cloud.
• Deep understanding of developer workflows, Git-based collaboration, Inner Source practices, source code governance, artifact management, and scalable SDLC operations.
• Ability to define architecture standards, document best practices, establish platform governance, and influence adoption across multiple engineering teams.
• Knowledge of AI-assisted engineering and AI-driven DevSecOps use cases, including GitHub Copilot, AI-powered security scanning, MCP server evaluation, and responsible integration of AI across the platform toolchain.
• Strong troubleshooting, problem-solving, communication, stakeholder management, cost optimization, resilience planning, and technical leadership skills.

Personal Characteristics:

• Strategic thinker with strong ownership mindset and ability to balance hands-on technical depth with enterprise-level architectural leadership.
• Passion for modern DevSecOps, platform engineering, automation, cloud-native technologies, security-by-design, and continuous improvement.
• Ability to simplify complex technical topics and communicate effectively with architects, engineering teams, security stakeholders, leadership, and vendors.
• Strong active listening, critical thinking, mentoring, facilitation, and cross-functional collaboration skills.
• Ability to evaluate high-pressure operational situations, prioritize effectively, and guide teams toward reliable and secure outcomes.
• Ability to identify critical risks, quality gaps, reliability issues, security vulnerabilities, and process inefficiencies quickly and accurately.
• Comfortable working in fast-paced enterprise environments with multiple priorities, distributed teams, and evolving technology landscapes.
• Strong systems thinking with the ability to understand how cloud, platform, security, development, release, and operations capabilities fit together.
• Ability to influence without authority, drive alignment across teams, and promote adoption of standards, reusable platforms, and engineering excellence practices.
• Detail-oriented, learning-focused, and committed to secure, reliable, cost-efficient, and scalable platform outcomes.

How we work together
We believe that we are better together than apart. For our office-based teams, this means working in-person at least 3 days per week.
Onsite roles require full-time presence in the company’s facilities.
Field roles are most effectively done outside of the company’s main facilities, generally at the customers’ or suppliers’ locations.
Indicate if this role is an office/field/onsite role.
About Philips
We are a health technology company. We built our entire company around the belief that every human matters, and we won't stop until everybody everywhere has access to the quality healthcare that we all deserve. Do the work of your life to help the lives of others.
• Learn more about our business.
• Discover our rich and exciting history.
• Learn more about our purpose.
If you’re interested in this role and have many, but not all, of the experiences needed, we encourage you to apply. You may still be the right candidate for this or other opportunities at Philips. Learn more about our culture of impact with care here.

#connectedcare