DevOps Architect Engineer

Role: DevOps Architect Engineer
Exp: 12+ years
Location: Sri Lanka
Notice Period: Immediate - 15 days
About the Role
The DevOps Architect is the design authority for how Kochasoft builds, ships, secures, and runs its cloud platforms. You take a project through its whole life: assessment, architecture, build, migration or deployment, operation, and optimisation. You are personally accountable for the architecture and for the outcome.
The work is hands-on and multi-cloud across Azure, Google Cloud, and AWS. The successful candidate has designed and delivered cloud migrations through to cutover, cut cloud spend by a measurable margin, and embedded SOC 2 controls into delivery pipelines without slowing engineering down. You design the platform, write the code that proves it, and are in the room when an incident is being worked.
Key Responsibilities
1. Assess and design
Define multi-cloud and hybrid reference architectures, landing zones, network topology, and identity standards.
Run discovery for new projects and migrations: dependency mapping, workload assessment, target architecture, and wave plan.
Design for high availability, disaster recovery, and multi-region resilience, with tested RTO/RPO targets.
Record decisions in architecture decision records (ADRs), lead design reviews, and say no to proposals that add cost or complexity without return.
2. Build the platform
Own infrastructure as code (Terraform, Terragrunt, Pulumi, Ansible) with module standards, policy as code, and drift detection.
Design the Kubernetes-native platform (AKS, GKE, EKS) and serverless patterns, with self-service paved roads for product teams.
Support MLOps and AI workloads (Kubeflow, Argo Workflows, Azure ML, RAG/LLM) with data and AI teams.
3. Deliver and migrate
Standardise CI/CD on GitHub Actions, Azure DevOps, and Jenkins, with GitOps through ArgoCD or Flux.
Implement progressive delivery (blue/green, canary, feature flags) with automated quality gates and fast rollback.
Lead on-premises-to-cloud, cloud-to-cloud, and monolith-to-microservices migrations through cutover runbooks, rollback criteria, and post-migration stabilisation.
4. Secure and comply
Embed SAST/DAST, dependency, container and IaC scanning, and secrets management (Vault, Azure Key Vault) into pipelines.
Own the technical controls for SOC 2 Type I/II and ISO 27001, with automated evidence collection (Drata or OneTrust) and an audit trail that holds up months later.
Design network security and identity: private endpoints, WAF/edge protection, least-privilege IAM, and SIEM integration with Security.
5. Operate and optimise
Build end-to-end observability (Prometheus, Grafana, Datadog, ELK, Splunk); define SLOs and error budgets; reduce MTTR through runbooks and self-healing.
Define the incident response and on-call model, lead major incidents where impact warrants, and run blameless post-incident reviews.
Drive FinOps: rightsizing, commitments, autoscaling, and architecture changes, reporting savings in numbers, not estimates.
6. Technical leadership
Set the engineering bar through design and code review, documentation, and mentoring of DevOps and SRE engineers.
Coach engineers on communicating technical risk and trade-offs to product and business stakeholders.
Take on other related duties as assigned to support engineering delivery and team goals.
Qualifications and Requirements
Education and credentials
University degree in Computer Science, Engineering, or a related field (equivalent education and experience acceptable).
At least one required: Azure Solutions Architect Expert (AZ-305), Google Cloud Professional Cloud Architect, or AWS Certified Solutions Architect Professional.
Asset: CKA/CKAD, Terraform Associate, AZ-400, FinOps Certified Practitioner, CKS or CCSP.
Experience
10+ years in DevOps, SRE, cloud, or platform engineering, including 5+ years in an architect role.
Deep, hands-on experience with at least two of Azure, Google Cloud, and AWS (Azure and Google Cloud strongly preferred).
Proven end-to-end delivery: at least one large cloud migration or platform build the candidate designed and personally carried through cutover and stabilisation.
Demonstrated, measurable cloud cost reduction.
Production Kubernetes at scale (AKS, GKE, or EKS) with microservices and serverless workloads.
Hands-on SOC 2 Type I/II or ISO 27001 controls within CI/CD and cloud environments.
Asset: MLOps, OpenStack or private-cloud experience, and delivery in SaaS, loyalty, retail-tech, or martech companies.
Skills and competencies
Expert in Terraform and IaC; strong in Python, Bash, PowerShell, YAML, and HCL.
Strong CI/CD and GitOps knowledge: GitHub Actions, Azure DevOps, Jenkins, GitLab CI, ArgoCD, Flux.
Solid grounding in networking, identity, and cloud security: VNets/VPCs, TLS, private endpoints, WAF, IAM.
Working knowledge of cloud databases (PostgreSQL, SQL Server, MongoDB, Cosmos DB, DynamoDB), including backup, replication, and failover.
Financially literate: cloud budgets, forecasts, and unit economics.
Clear writer: ADRs, runbooks, post-incident reviews, and change requests that stand up to later scrutiny.
Root-cause thinker with strong ownership, able to manage competing priorities under pressure.

Work arrangement
Yes