Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 17 days ago

Platform & DevSecOps Delivery Architect

SirsiDynix174 open roles

Where
Arizona United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowPlatform & DevSecOps Delivery ArchitectSirsiDynix · Arizona United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on SirsiDynix's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market. SirsiDynix postings stay open a median of 37 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 17 days ago

SirsiDynix median: 37 days open

The posting

About the Opportunity & The Mission

STChealth has nearly 40 years safeguarding communities by building the systems that report and verify more than a quarter of all childhood and adult vaccinations nationwide. As part of the Harris family of software companies, we deliver mission-critical public sector technology where platform stability directly protects public health.

We are seeking a Platform & DevSecOps Delivery Architect to act as the primary owner and builder of our modern "Golden Path" deployment platform.

This role is not about babysitting infrastructure or handling one-off developer support tickets. It is about building an automated, secure, self-service software delivery platform that makes shipping safe, compliant code effortless for development teams. You will bridge our high-throughput modern platform and our existing production systems, ensuring every build meets rigorous DevSecOps and Operational Readiness standards—regardless of where the code ultimately lands.

If you love clean pipeline architecture, automated security rails, and solving complex distributed systems puzzles with a high degree of autonomy, this role is built for you.

What You Will Build and Own

1. The Paved Road / "Golden Path" Delivery Engine

  • Universal CI/CD Pipelines: Architect, implement, and maintain centralized, reusable pipeline templates (GitHub Actions / GitLab CI) that abstract underlying infrastructure away from software developers.
  • Dual-Target Dispatching: Build a modular release architecture that runs universal scanning and sanitization upstream, while intelligently branching to specific downstream delivery targets:
  • Modern Engine: GitOps promotion (ArgoCD / Kargo) with progressive canary rollouts (Argo Rollouts) to Amazon EKS.
  • Core VM Engine: Automated machine-image pipelines (HashiCorp Packer, AWS Launch Templates) and blue/green agent updates (EC2 / ClearData Docker) for state production systems.
  • Shift-Down Self-Service: Provide engineering teams with pre-configured project scaffolding and Helm/IaC modules so they can stand up new services independently within compliant guardrails.

2. DevSecOps & Security Gate Automation

  • Automated Pipeline Gates: Embed automated vulnerability scanning directly into the build process:
  • Static Application Security Testing (SAST) and Software Composition Analysis (SCA) dependency checks.
  • Container image hygiene and snapshot CVE detection prior to promotion.
  • Pre-commit and pipeline secret-detection to eliminate static credential leaks.
  • Automated Compliance & Audit Trails: Build automated generation of software artifacts and deployment logs to satisfy strict SOC 2 Type II, HIPAA, and federal public-health security audits without manual spreadsheets.
  • Runtime Identity & Secrets Governance: Design and operate programmatic secrets distribution via External Secrets Operator (ESO) syncing from AWS Secrets Manager / Parameter Store backed by least-privilege IAM roles.

3. Operational Readiness Reviews (ORRs) as Code

  • Enforcing Quality Guardrails: Partner with Engineering leads to ensure no service reaches staging or production without meeting automated operational standards.
  • Telemetry Scaffolding: Ensure all platform templates integrate standardized OpenTelemetry (OTel) instrumentation for logging, distributed tracing, and metrics (feeding the Grafana LGTM stack and Datadog).
  • Data Privacy at the Edge: Embed client-side sanitization checks into build and logging pipelines to verify Protected Health Information (PHI) and PII are redacted before data reaches centralized collectors.

4. Self-Hosted AI Infrastructure & Agentic Orchestration

  • AI Routing & Gateways: Architect and operate secure, compliant private AI infrastructure—including self-hosted AI gateways, traffic routing, rate limiting, and private cloud-hosted LLM endpoints.
  • Agentic Workflows & Orchestration: Design, deploy, and support scalable execution environments for autonomous agentic workflows, orchestrating multi-agent pipelines, vector storage integration, and operational context retrieval.

What We Are Looking For

  • Architecture Experience: 5+ years of hands-on experience in Platform Engineering, DevOps, or Site Reliability Engineering (SRE), with demonstrated experience designing and standardizing enterprise CI/CD pipelines.
  • Cloud & Containers: Deep hands-on proficiency with Amazon Web Services (AWS) and Kubernetes (Amazon EKS), including container networking, pod security, and Helm chart lifecycle management.
  • GitOps & Delivery Mechanics: Practical experience with GitOps controllers (ArgoCD, Flux) and automated canary deployment strategies (Argo Rollouts, weighted ingress, or ALB traffic shifting).
  • Coding & Systems Development: Practical software development experience with C# / .NET, Node.js, and Python to build internal tooling, automate platform interfaces, and understand service-level application code.
  • AI Infrastructure & Agentic Systems: Hands-on experience engineering self-hosted AI architecture, including AI model gateways, intelligent request routing, and orchestrating multi-step agentic workflows.
  • Traditional Infrastructure Chops: Working knowledge of VM-based delivery concepts (HashiCorp Packer, EC2 Launch Templates, Cloud-Init, or rolling agent deployments).
  • DevSecOps Integration: Experience integrating security scanning tools (Trivy, Snyk, SonarQube, AWS Inspector, or similar) directly into deployment workflows as non-negotiable quality gates.
  • Infrastructure as Code (IaC): Solid experience authoring modular, maintainable Terraform or Pulumi definitions.
  • AI & Innovation Mindset: Deep curiosity and practical capability with emerging technologies—both in leveraging AI-assisted development tools (copilots, chat assistants) to accelerate operational toil, and in architecting scalable infrastructure for AI-driven workloads.

Highly Regarded Nice-to-Haves

  • Experience working inside AWS GovCloud (aws-us-gov partition) and navigating GovCloud IAM/IRSA partition boundaries.
  • Background in HIPAA-regulated, HITRUST, or public-sector SaaS data environments.
  • Experience building and deploying backend services or automated agent frameworks in C# (.NET Core), Python, or Node.js/TypeScript.
  • Experience deploying and managing vector databases (e.g., Qdrant, pgvector) and embedding inference pipelines in containerized environments.

What We Offer

  • 100% Remote Flexibility: Work from home anywhere within the United States.
  • Comprehensive Day-One Benefits: Medical, Dental, and Vision coverage starting on your first day of employment.
  • Retirement & Equity Programs: 401(k) matching program and Constellation Software employee stock ownership opportunities.
  • Work-Life Balance: 3 weeks of vacation, 5 personal days, and company-recognized holidays.
  • Mission Impact: The platform you build directly supports the delivery of systems tracking vaccines and protecting public health across the nation.

About Us: STChealth, founded in 1988, is dedicated to eradicating vaccine-preventable diseases through innovative technology and service solutions. With over 36 years of experience, the company has developed the first Immunization Information System (IIS) and now supports more than a quarter of all vaccinations reported nationwide. STChealth’s platform securely connects consumers, providers, and public health entities, facilitating real-time data exchange to enhance immunization rates and public health responses.

Recognized for its commitment to employee well-being, STChealth has received the 2024 Top Workplaces Industry Award and the American Heart Association’s Gold Recognition for promoting a healthy work culture. The company values innovation, work-life flexibility, and a collaborative environment, making it an attractive workplace for professionals passionate about public health and technology. Learn more at: stchealth.com

About Harris:

Harris is a leading provider of mission critical software to the public sector in North America. As a wholly owned subsidiary of Constellation Software Inc. (“CSI”, symbol CSU on the TSX), Harris has become the cornerstone for CSI’s investment in utility, local government, school districts, public safety, and healthcare software verticals.

Our success has been realized through investments in our proprietary software and market expertise. This focus, combined with acquiring businesses that build upon or complement our offerings, has helped drive our success. Harris will continue to growth through reinvestment – both in the people and products that we offer and making investments in acquiring new businesses.

#LI-remote

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against SirsiDynix's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on SirsiDynix's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    SirsiDynix's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.