DevOps Architect

Remote (but must reside in the metro DC area)

We are seeking an experienced, hands-on DevOps Lead Architect to drive enterprise cloud infrastructure, continuous delivery, automated security, and observability across our modern application ecosystems. This role requires a proven technical leader capable of architecting scalable AWS cloud foundations using Infrastructure as Code ( Terraform or CloudFormation ), administering enterprise CI/CD via CloudBees Core , managing artifact lifecycles in JFrog Artifactory , orchestrating Kubernetes workloads, and implementing full-stack monitoring using Datadog or New Relic .

• AWS Architecture & IaC: Architect and maintain scalable, resilient, and secure multi-account AWS environments using modular Infrastructure as Code ( Terraform or CloudFormation ), enforcing drift detection and automated state management.
• Enterprise CI/CD (CloudBees Core): Design, deploy, and administer CloudBees Core (Operations Center, managed controllers, high availability, role-based access control, and Groovy-based Shared Libraries) with dynamic build agents hosted on Kubernetes.
• Kubernetes Orchestration & Security: Design, scale, and harden enterprise Kubernetes clusters (EKS or self-managed); manage Helm deployments, ingress controllers, service meshes, and enforce runtime security policies (OPA/Gatekeeper or Kyverno).
• Artifact & Package Governance: Oversee enterprise binary management using JFrog Artifactory , configuring promotion pipelines, virtual/remote repositories, caching policies, and automated vulnerability scanning with JFrog Xray.
• Full-Stack Observability & APM: Architect enterprise monitoring, logging, and tracing using Datadog or New Relic —deploying daemonsets, APM tracing, custom metrics, SLI/SLO dashboards, and proactive alerting across AWS and Kubernetes layers.
• DevSecOps Integration: Embed shift-left security practices directly into CloudBees Core pipelines, integrating SAST, DAST, container scanning (Trivy, JFrog Xray), and centralized secrets management (HashiCorp Vault or AWS Secrets Manager).