Orion Innovation
DevSecOps Architect
At a Glance
About This Role
Orion Innovation is a premier, award-winning, global business and technology services firm. Orion delivers game-changing business transformation and product development rooted in digital strategy, experience design, and engineering, with a unique combination of agility, scale, and maturity. We work with a wide range of clients across many industries including financial services, professional services, telecommunications and media, consumer products, automotive, industrial automation, professional sports and entertainment, life sciences, ecommerce, and education.
Key Responsibilities
- Platform architecture and lifecycle ownership: Own the architecture, upgrade cadence, and DR planning for the enterprise DevOps toolchain including quarterly upgrades with release plans, backout procedures, and test/prod promotion, plus documented DR runbooks and DR tests.
- Access and governance model design: Lead the redesign of role-based access across GitHub, Artifactory, and the security scanning tools.
- Artifact and repository management: Define repository structure, snapshot vs. release handling, and promotion processing.
- Security, compliance, and credential hygiene: Drive NERC-CIP compliance requirements for DevOps tools, enforce password rotation policy, manage LDAP/service account changes, and support audits and asset ownership tracking.
- Run organizational change management (pilots, training, communications), and manage license renewals, cost estimates, and vendor relationships.
- Proven expertise in DevOps methodologies with a minimum of 6 years of experience.
- Hands-on experience with CI/CD tools and frameworks.
Key Skills required
- CI/CD and source control: GitHub Enterprise administration and automation of repo/project onboarding.
- Artifact and DevSecOps tooling: JFrog Artifactory/Xray, Coverity, Black Duck, and SRM, including vulnerability triage, remediation, and exception handling.
- Containers and infrastructure: OpenShift/Kubernetes, Docker, base images, and platform upgrades, migrations, backup, and DR planning.
- Scripting and automation: Python, PowerShell, shell, and YAML-driven configuration for admin tooling and remediation automation.
- Identity, security, and compliance: LDAP/AD, SSO, RBAC design, CyberArk/password rotation
- Architecture and leadership: Tool evaluation (POCs), integration design (Jira, ServiceNow, LeanIX), stakeholder management, change management, documentation, and vendor/license management.
Orion is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, citizenship status, disability status, genetic information, protected veteran status, or any other characteristic protected by law.
Candidate Privacy Policy
Orion Systems Integrators, LLC and its subsidiaries and its affiliates (collectively, “Orion,” “we” or “us”) are committed to protecting your privacy. This Candidate Privacy Policy (orioninc.com) (“Notice”) explains:
- What information we collect during our application and recruitment process and why we collect it;
- How we handle that information; and
- How to access and update that information.
Your use of Orion services is governed by any applicable terms in this notice and our general Privacy Policy.
Source: Orion Innovation careers · View original posting
About Orion Innovation
Orion Innovation is a global digital transformation and product development services firm founded in 1993 and headquartered in Edison, New Jersey. With over 6,400 associates across major delivery centers in North America, EMEA, APAC, and LATAM, Orion focuses on helping enterprises innovate and scale through digital strategy, experience design, and engineering. The company offers a wide range of services, including software engineering, cloud and infrastructure services, data analytics, cybersecurity, and mobile technology. Orion serves various industries such as hi-tech, financial services, healthcare, automotive, and education, providing comprehensive solutions that support digital product development and business transformation. With an annual revenue of approximately $1.3 billion, Orion is recognized as a leader in outsourcing and digital innovation. The company is committed to corporate social responsibility, promoting diversity, community engagement, and initiatives aimed at improving health and education.
Security at Orion Innovation
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Holistic and Unified approach to cybersecurity with Flexible and Efficient delivery.
- Collaborates strategically with leadership and all stakeholders including IT, security, legal, and business teams. Emphasizes proactive security measures with philosophy that 'The most important security work is done long before an attempted breach occurs.' Addresses modern challenges including 'AI against AI' and ensuring LLM guardrails operate within defined principles.
- No explicit mention of 'paved road' or specific developer-centric tooling workflows in public mission statements.
Security Team
- Key Public-Facing Leaders: Aaron Mathews (Global Head of Cybersecurity Practice), David Winter (EVP - Chief Cloud & Strategic Partner Officer), Rajul Rana (Chief Technology Officer).
- Active AppSec Job Postings (1 identified):
- with common skill/tool patterns in Security Operations, Infrastructure Advisory, Cloud Governance. Gaps: No public CISO or dedicated AppSec organizational chart available; leadership primarily categorized under 'Cybersecurity Practice' or 'Cloud & Strategic Partners.'
Key Initiatives
- DevSecOps (security operations) implementation for shift-left practices.
- Vulnerability management process includes conducting penetration testing and vulnerability assessments, with proactive detection and remediation of threats.
- Secure SDLC focus on Workload and Programming Security.
- Recent initiatives include AI-Powered Managed SOC with collaborative threat intelligence sharing and LLM Guardrails for safeguarding enterprise AI.
- Gaps: No public data on specific vulnerability triage SLAs, bug bounty programs, or internal security champion structures.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Orion Innovation's site