DevSecOps Architect

Orion Innovation is a premier, award-winning, global business and technology services firm.  Orion delivers game-changing business transformation and product development rooted in digital strategy, experience design, and engineering, with a unique combination of agility, scale, and maturity.  We work with a wide range of clients across many industries including financial services, professional services, telecommunications and media, consumer products, automotive, industrial automation, professional sports and entertainment, life

sciences, ecommerce, and education.

Key Responsibilities

• Platform architecture and lifecycle ownership: Own the architecture, upgrade cadence, and DR planning for the enterprise DevOps toolchain including quarterly upgrades with release plans, backout procedures, and test/prod promotion, plus documented DR runbooks and DR tests.
• Access and governance model design: Lead the redesign of role-based access across GitHub, Artifactory, and the security scanning tools.
• Artifact and repository management: Define repository structure, snapshot vs. release handling, and promotion processing.
• Security, compliance, and credential hygiene: Drive NERC-CIP compliance requirements for DevOps tools, enforce password rotation policy, manage LDAP/service account changes, and support audits and asset ownership tracking.
• Run organizational change management (pilots, training, communications), and manage license renewals, cost estimates, and vendor relationships.
• Proven expertise in DevOps methodologies with a minimum of 6 years of experience.
• Hands-on experience with CI/CD tools and frameworks.
• Key Skills required
• CI/CD and source control: GitHub Enterprise administration and automation of repo/project onboarding.
• Artifact and DevSecOps tooling: JFrog Artifactory/Xray, Coverity, Black Duck, and SRM, including vulnerability triage, remediation, and exception handling.
• Containers and infrastructure: OpenShift/Kubernetes, Docker, base images, and platform upgrades, migrations, backup, and DR planning.
• Scripting and automation: Python, PowerShell, shell, and YAML-driven configuration for admin tooling and remediation automation.
• Identity, security, and compliance: LDAP/AD, SSO, RBAC design, CyberArk/password rotation
• Architecture and leadership: Tool evaluation (POCs), integration design (Jira, ServiceNow, LeanIX), stakeholder management, change management, documentation, and vendor/license management.
• Orion is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, citizenship status, disability status, genetic information, protected veteran status, or any other characteristic protected by law.
• Candidate Privacy Policy
• Orion Systems Integrators, LLC and its subsidiaries and its affiliates (collectively, “Orion,” “we” or “us”) are committed to protecting your privacy. This
• Candidate Privacy Policy (orioninc.com)
• (“Notice”) explains: What information we collect during our application and recruitment process and why we collect it; How we handle that information; and
• How to access and update that information.
• Your use of Orion services is governed by any applicable terms in this notice and our general
• Privacy Policy.