Associate Director, DevSecOps Architect
S&P Global16 hours ago
Base Salary
$150k - $205k/yr
Responsibilities
- Define and lead enterprise DevSecOps architecture, roadmap, adoption strategy, secure CI/CD patterns, and paved-road developer capabilities.
- Embed automated security controls across the SDLC, including SAST/DAST, software composition analysis, secrets detection, artifact integrity verification, container scanning, infrastructure-as-code policy scanning, and runtime protection.
- Govern standards for source control, build automation, artifact management, release orchestration, observability, vulnerability management, and software supply-chain security.
- Lead architecture reviews, threat modeling, design decisions, proofs of concept, reference architectures, engineering standards, ADRs, and platform roadmaps.
- Drive platform reliability, resilience, operational readiness, DORA metrics, security findings density, and developer productivity measurement.
- Mentor architects and engineers, build communities of practice, influence senior stakeholders, and advance enterprise-wide secure delivery and developer experience.
Requirements
- 7+ years of experience in DevSecOps, cloud architecture, platform engineering, or cybersecurity engineering, including leadership of enterprise-scale transformation or platform architecture programs.
- Production experience designing and operating enterprise CI/CD pipelines with Git-based source control, artifact repositories, Kubernetes or similar container orchestration, and Terraform or similar infrastructure-as-code tooling.
- Production experience embedding SAST/DAST, software composition analysis, secrets detection, container image scanning, and policy-as-code enforcement using technologies such as OPA or Kyverno.
- Production experience with at least one major cloud platform—AWS, Azure, or GCP—including cloud-native IAM, secrets management, network security, and vulnerability management.
- Bachelor's degree in computer science, engineering, cybersecurity, information systems, or equivalent practical experience.
- Preferred qualifications include regulated-enterprise experience, Amazon EKS, zero-trust architecture, SRE practices, developer self-service platforms, relevant certifications such as AWS Security Specialty, CKS, or CISSP, supply-chain security, observability or SIEM integration, and AI-assisted development or automated security operations experience.
Benefits
- Health care coverage and wellness benefits.
- Generous paid time off and flexible downtime.
- Continuous learning and career development resources.
- Retirement planning, continuing education, company-matched student loan contribution, and financial wellness programs.
- Family-focused perks, retail discounts, and referral incentive awards.
- Eligible for an annual incentive plan and additional S&P Global benefits.
- The posting states an anticipated US base salary range of $150,000 to $205,000.