Hexaware Technologies UK Limited
Devops Architect
Senior DevOps/cloud-security architect at Hexaware (London) designing multi-cloud infrastructure across AWS, Azure and GCP with Terraform, building GitLab CI/CD and Azure DevOps pipelines with DevSecOps controls, writing Rego/OPA policy-as-code, and operating CNAPP/CSPM tooling (Wiz, CloudGuard) while supporting application teams.
- Compensation
- Not disclosed
- Location
- City of Westminster, United Kingdom
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 10+ years
- Category
- Devops
- Posted
Skills
Must have
- 10+ years of IT experience
- Strong expertise in multi-cloud infrastructure (AWS, Azure, GCP)
- Hands-on Terraform: deployment, reusable module development, IaC standards and troubleshooting
- Build and maintain CI/CD pipelines using GitLab CI/CD and Azure DevOps
- Automation solutions using Python
- Policy as Code with Rego/Open Policy Agent (OPA)
- Strong understanding of cloud security controls across AWS, Azure and GCP
- Implement and support Azure Policies for governance and security enforcement
- Work with AWS Service Control Policies (SCPs) and Resource Control Policies (RCPs)
- Understand and troubleshoot cloud IAM roles, permissions and access controls
- Strong understanding of CNAPP and CSPM concepts
- Hands-on or operational knowledge of Wiz and CloudGuard
- DevSecOps: integrate security and policy controls into CI/CD workflows
- Strong communication and stakeholder-management skills
- Strong problem-solving and troubleshooting capabilities
- Ability to explain complex security requirements in simple, practical terms
- Strong documentation and knowledge-sharing skills
Full description
Cloud Infrastructure & Terraform
- Design, deploy and manage cloud resources across AWS, Azure and GCP.
- Develop and maintain reusable Terraform modules for cloud resource deployment.
- Implement Infrastructure as Code standards and support application teams with Terraform-related implementation and troubleshooting.
- Promote reusable, scalable and secure infrastructure deployment patterns.
CI/CD & DevSecOps
- Build, maintain and support CI/CD pipelines using GitLab CI/CD and Azure DevOps.
- Integrate infrastructure and security validations into application deployment pipelines.
- Troubleshoot pipeline failures and security-policy validation issues.
- Support development teams in adopting automated security controls within their existing CI/CD workflows., Develop automation solutions using Python to improve operational efficiency and reduce repetitive manual activities.
- Develop and maintain Rego/OPA policies for automated cloud and Infrastructure as Code security validation.
- Investigate policy failures, false positives and configuration issues.
- Work with application teams to understand policy violations and provide appropriate remediation guidance.
Cloud Security
- Strong understanding of cloud security controls across AWS, Azure and GCP.
- Implement and support Azure Policies for governance and security enforcement.
- Work with AWS Service Control Policies (SCPs) and Resource Control Policies (RCPs).
- Understand and troubleshoot cloud IAM roles, permissions and access controls.
- Support secure deployment patterns and cloud governance requirements across multiple cloud environments.
CNAPP/CSPM
- Strong understanding of Cloud-Native Application Protection Platform (CNAPP) and Cloud Security Posture Management (CSPM) concepts.
- Hands-on or operational knowledge of Wiz and CloudGuard.
- Investigate cloud security findings, policy violations and configuration issues identified through CNAPP/CSPM platforms.
- Work with application and Cyber Security teams to understand findings and support remediation.
- Assist application teams with onboarding and adoption of cloud security solutions.
Stakeholder Collaboration & Application Support
- Collaborate closely with Cyber Security, Cloud Engineering, DevOps and application development teams.
- Provide technical guidance to application teams during solution adoption and onboarding.