Cloud DevOps Architect: Hands-On

Profile

u003cpu003eSUMMARY and RESPONSIBILITIESu003c/pu003eu003cpu003e u003c/pu003eu003cpu003eThe devops / devsecops pipeline architect cultivates a deep understanding of the way software is written, build and delivered at scale in modern, agile enterprises, and understand contemporary and emerging trends and technologies in instituting and embedding controls into modern development, build and release operations.u003c/pu003eu003cpu003e u003c/pu003eu003cpu003eThe architect uses process design and process optimization skills to review and propose enhancements, frequently including automation, to technology components and associated processes. The architect is fluent in topics in cyber-security and devops metrics, and engages devops architects to design and implement an effective metrics and reporting program.u003c/pu003eu003cpu003e u003c/pu003eu003cpu003eThe architect proactively engages stakeholders and functions throughout GIS to proactively identify synergies and impacts with devops software practices, including technology permit operations, risk analysis and remediation, as well as monitoring and response functions.u003c/pu003eu003cpu003e u003c/pu003eu003cpu003eAs an agent of change the architect understands and rallies proponents and adherents of alternative software lifecycles, and promotes a nuanced yet comprehensive understanding of the virtues of devops processes, and develops a strategy that optimizes enterprise security posture using available resources.u003c/pu003eu003cpu003e u003c/pu003eu003cpu003ePrimary Responsibilitiesu003c/pu003eu003culu003eu003cliu003eDesign and supervise the integration of application security validation and control technology into software development, build, test and release platformsu003c/liu003eu003cliu003eEngage scrum masters, developers, and associated devops stakeholders to articulate security processes and objectives, and facilitate execution toward security objectivesu003c/liu003eu003cliu003eSubject matter expertise in application security of one or more major enterprise application platforms used by Bank of America, incl. but not limited to Java / J2EE, .Net, Mobile (iOS and / or Android), Big Data, Python, Mainframeu003c/liu003eu003cliu003eApply and interpret application security objectives in context of designated platformsu003c/liu003eu003cliu003eIdentify, champion, and supervise the implementation of defensive controls, methods and processes within Bank applicationsu003c/liu003eu003cliu003eContribute to an enterprise library of application security components and systems through vendor selection, evaluation, and original contributionsu003c/liu003eu003cliu003ePro-actively engage stakeholders, including development managers, developers, architects, and governance bodies in the Bank to achieve security objectivesu003c/liu003eu003cliu003eDeliver multiple technology projects across multiple teamsu003c/liu003eu003cliu003eRegularly interact with senior technology and business management, requiring the ability to explain complex technical matters in a way both technical and non-technical personnel can understandu003c/liu003eu003cliu003eManage business partner relationships to deliver a seamless and responsive workflowu003c/liu003eu003cliu003eCollaboratively develop technical architectures, processes and procedures pursuant to application security objectives together with business and technical partnersu003c/liu003eu003cliu003eDeliver training and collaborate with internal and approved external knowledge-sharing bodiesu003c/liu003eu003cliu003eDevelop processes and procedures to advance application security objectives, suitable for adoption throughout the Banku003c/liu003eu003cliu003eContribute to and interpret enterprise policies, standards, and baselines and mentor personnel with less experience or knowledge of the sameu003c/liu003eu003c/ulu003eu003cpu003e u003c/pu003eu003cpu003eREQUIRED SKILLS AND EXPERIENCEu003c/pu003eu003culu003eu003cliu003e5-10 years of progressive experience in application security and / or software developmentu003c/liu003eu003cliu003eBachelor's degree or higher in CS, IT, a related technical or engineering fieldu003c/liu003eu003cliu003eExperience working in the financial sectoru003c/liu003eu003cliu003eCISSP or similar professional certification, or commensurate experienceu003c/liu003eu003cliu003eExperience with devops processes such as Agile, Scrum and Kanban, and technologies, such as Jenkins, JIRA, Maven and Artifactoryu003c/liu003eu003cliu003eFamiliarity with contemporary open-source and market offerings around devops and devsecopsu003c/liu003eu003cliu003eKnowledge of relevant standards, including IETF (e.g., HTTP, TLS, and networking), W3 (e.g., HTML, Javascript, DOM) as well as platform-specific standardsu003c/liu003eu003cliu003eExposure to application security testing techniquesu003c/liu003eu003cliu003eAble to read and write software in at least one programming languages such as C, C , .Net, Java, Pythonu003c/liu003eu003cliu003eComprehensive understanding of at least one application security life cycle, up to and including operations, maintenance and decommissioningu003c/liu003eu003cliu003eKnowledge of at least three application security testing methodologies and approaches, including formal methods, system level security, SAST / DAST, threat modeling, ethical hacking and crowd-sourcingu003c/liu003eu003cliu003eExperience with business planning, governance and management of application development or application security functions at a systemically important financial institutionu003c/liu003eu003cliu003eAbility to write policies, standards and baselines around application security and associated topicsu003c/liu003eu003c/ulu003eu003c/pu003eu003cimg src=****/u003e}]

Company info

Sign Up Now - WashingtondcCrossing.com