Lead DevSecOps Engineer

ABOUT THE ROLE

As a Cloud Security Architect, you will join SoftServe’s Critical Services Center of Excellence and Cybersecurity Practice, working with global clients to design, implement, and improve security for cloud-native and distributed environments. In this role, you will help organizations strengthen their security posture by delivering secure-by-design solutions across public, private, and hybrid cloud platforms. You will engage throughout the entire project lifecycle, from pre-sales consulting and architecture design to implementation and continuous improvement.

RESPONSIBILITIES

• Design and implement security measures across the full Software Development Lifecycle (SDLC), including requirements, design, development, testing, and deployment
• Lead the design and delivery of secure cloud-native architectures following Secure by Design principles
• Act as a key technical advisor during pre-sales engagements and project delivery
• Collaborate with clients to understand business and security requirements, define target architectures, develop prototypes, and support implementation activities
• Perform threat modeling and define security architecture requirements for development and product teams
• Implement and manage scalable Identity and Access Management (IAM) guardrails across Azure, AWS, and GCP environments
• Develop and execute data protection initiatives, including encryption, key management, and tokenization strategies
• Create and maintain secure configurations for containerized platforms (Kubernetes, EKS) and Infrastructure as Code (Terraform) environments
• Assess cloud environments, identify security risks, and drive remediation initiatives for public and hybrid cloud solutions
• Stay current with emerging security threats, vulnerabilities, and cloud security trends, providing recommendations for risk mitigation and security enhancements
• Promote security awareness across organizations by conducting workshops, training sessions, and secure coding education programs
• Collaborate with cross-functional and geographically distributed teams to deliver world-class cybersecurity solutions

REQUIREMENTS

• 3+ years of hands-on experience in Cloud Security-focused roles, delivering security solutions for cloud-native and distributed architectures in complex environments
• Strong expertise in major cloud platforms, particularly Azure and AWS
• Good understanding of cloud technologies, virtualization, containers, service mesh architectures, and cloud orchestration tools, including Kubernetes, Docker, VMware, GCP, and related platforms
• Proven experience in the assessment, implementation, optimization, troubleshooting, and documentation of security controls across SaaS, PaaS, and IaaS environments
• Strong knowledge of cloud security domains, including IAM, network security, cryptography, key management, data protection, and Secure Software Development Lifecycle (SSDLC)
• Experience identifying, assessing, and remediating security risks in public and hybrid cloud environments
• Practical expertise in threat modeling and translating security requirements into actionable guidance for engineering teams
• Knowledge of industry trends and best practices related to public, private, and hybrid cloud security
• Relevant industry certifications such as CCSP, CISSP, CSSLP, or equivalent are highly preferred
• Strong stakeholder management skills with the ability to influence decisions and build trusted relationships
• Proactive, self-driven mindset with excellent problem-solving capabilities
• Excellent verbal and written communication skills, with the ability to lead discussions and influence distributed teams
• Upper-Intermediate or higher level of English proficiency, with confidence working in multicultural and international environments