Associate Director, DevSecOps Architect
S&P Global17 hours ago
Base Salary
$150k - $205k/yr
Responsibilities
- Define and lead enterprise DevSecOps architecture, roadmap, governance, and adoption strategy across cloud, hybrid, container, and orchestration environments.
- Design secure, scalable CI/CD patterns and reusable paved-road developer platform capabilities.
- Embed automated SAST/DAST, software composition analysis, secrets detection, artifact integrity verification, container scanning, infrastructure-as-code policy scanning, and runtime protection into the SDLC.
- Govern standards for source control, build automation, artifact management, release orchestration, observability, vulnerability management, and software supply-chain security.
- Lead architecture reviews, threat modeling, design decisions, proofs of concept, reference architectures, ADRs, and platform roadmaps.
- Define and monitor DORA, security, resilience, and developer productivity metrics.
- Mentor architects and engineers and build communities of practice to accelerate enterprise DevSecOps adoption.
Requirements
- 7+ years of experience in DevSecOps, cloud architecture, platform engineering, or cybersecurity engineering, including leadership of enterprise-scale transformation or platform architecture programs.
- Hands-on production experience designing and operating enterprise CI/CD pipelines with Git-based source control, artifact repositories, Kubernetes, Terraform, version control, and automated policy validation.
- Production experience embedding SAST/DAST, software composition analysis, secrets detection, container image scanning, and policy-as-code technologies such as OPA or Kyverno.
- Hands-on production experience with AWS, Azure, or GCP, including cloud-native IAM, secrets management, network security, and vulnerability management in regulated or enterprise-scale environments.
- Bachelor's degree in computer science, engineering, cybersecurity, or information systems, or equivalent practical experience.
- Preferred qualifications include regulated-enterprise experience, Amazon EKS production experience, zero-trust architecture, SRE practices, developer self-service platform design, relevant cloud or cybersecurity certifications, software supply-chain security, observability or SIEM integration, and AI-assisted development or security operations tooling experience.
Benefits
- Health care coverage and wellness benefits.
- Generous flexible time off.
- Continuous learning and career development resources.
- Retirement planning, continuing education, company-matched student loan contributions, and financial wellness programs.
- Family-friendly benefits and partner and child-related perks.
- Retail discounts and referral incentive awards.
- The role is eligible for an annual incentive plan and additional S&P Global benefits.