What are the responsibilities and job description for the Need - DevSecOps Lead ~ W2 Only position at Data Systems Integration Group?
DevSecOps Lead (Architect)
Location: United States (remote; travel to customer sites as needed)
Type: Full-time
Team: Founding lead of a global team of 4 (Lead US 1 Senior UK 2 Seniors India)
Context
We build a Spring Boot microservices product deployed on-prem at enterprise customers. Engineering runs on Windows; Dev/QA CI/CD is on Azure DevOps with self-hosted Dev/QA servers. Today, server setup, deployments, and database/middleware (SQL Server, MongoDB, RabbitMQ) upgrades are all manual across Dev, QA, and customer production — and there is no monitoring or alerting in place. We are building a DevSecOps practice from the ground up to fix this.
What You Will Own
• Define a standard reference architecture for customer on-prem deployments, with a small set of supported variations.
• Automate server provisioning end-to-end — for self-hosted Dev/QA servers and for customer production environments — replacing today’s fully manual server setup with Infrastructure-as-Code (Terraform/Ansible/PowerShell DSC or equivalent).
• Automate environment-to-environment software upgrades (application SQL Server MongoDB RabbitMQ) so that a release flows Dev → QA → customer production via pipelines, not manual steps.
• Own Azure DevOps Pipelines for build, test, scan, package, release, and rollback.
• Drive containerization maturity (Docker, Docker Compose, Kubernetes) and decide the right footprint for our product.
• Bring creative automation ideas (self-service portals, ChatOps, GitOps, golden images, one-click installers for customer sites) and put governance around them — change control, approvals, audit trails, environment policies, role-based access.
• Stand up monitoring and alerting across Dev, QA, and customer production (CPU/memory, service uptime, server health, DB growth, RabbitMQ queues).
• Establish a security audit program: vulnerability scanning, SAST/DAST/SCA, image scanning, secrets management, server/DB/broker hardening.
• Transition DevOps to a ticketing-based service model with defined SLAs; enforce structured intake; reduce direct-message-driven work.
• Translate customer needs into technical requirements; act as the senior customer-facing technical voice for DevSecOps.
• Hire, mentor, and lead the UK and India seniors; act in an interim product/strategy capacity until the team structure matures.
Must-Have
• 10 years in DevOps / DevSecOps / Infrastructure, with 3 years at architect or lead level.
• Hands-on Azure DevOps Pipelines.
• Deploying and operating Spring Boot (Java) microservices in production.
• Strong Windows Server administration and PowerShell.
• Infrastructure-as-Code (Terraform, Ansible, PowerShell DSC, or similar) for automated server provisioning.
• SQL Server, MongoDB, RabbitMQ — automated deployments, upgrades, backups.
• Containerization: Docker, Docker Compose, Kubernetes.
• Security: vulnerability mgmt, SAST/DAST/SCA, image scanning, secrets vaults, hardening, audit readiness.
• Monitoring/observability: PrometheGrafana, Azure Monitor, ELK, Datadog, or equivalent.
• Setting up ticket-based service models and SLAs (Azure Boards, Jira Service Management, ServiceNow).
• Customer-facing experience and willingness to travel.
• Built a DevSecOps function from scratch.
• Experience delivering enterprise software into on-prem customer environments.
Nice-to-Have
• Certifications: AZ-400, CKA/CKS, CISSP.