Staff DevSecOps Engineer

Role Overview

We are looking for a visionary Staff DevSecOps Engineer to serve as a core contributor to both our security platform as well as our cloud platform. Operating as a high-impact individual contributor, you will partner with the Technology Operations team to define the standards, frameworks, and long-term vision for secure software engineering across the entire enterprise. You will work with the VP of TechOps to help solve the most complex technical challenges at scale and drive organizational change.

Key Responsibilities

• Provide a strong voice in the security of an enterprise-wide, multi-region SaaS platform, IAM governance strategies, and zero-trust cloud architectures. 

• Build a security platform that abstracts complex security operations, allowing developers to deploy secure, compliant workloads seamlessly. 

• Define and enforce enterprise compliance frameworks utilizing Policy-as-Code tooling such as Open Policy Agent (OPA) or Kyverno across all infrastructure and Kubernetes environments. 

• Champion a security-first culture across the broader organization, conduct architectural reviews and threat modelling exercises for mission-critical services. 

• Partner with engineering leadership to define and embed security throughout the software development lifecycle, including secure coding practices, application security testing, software supply chain security, and developer enablement. 

• Evolve and mature vulnerability management, cloud security posture management, and risk reduction programs, using automation and measurable outcomes to drive organizational security improvements.

• Evaluate, pilot, and negotiate foundational enterprise security tools, using industry-standard metrics and KPIs to measure the effectiveness of our global security posture. 

• Lead strategic application & cloud security initiatives across multi-cloud and Kubernetes environments, shaping enterprise security architecture, identity governance, and long-term security roadmaps. 

• Partner with compliance and legal to ensure accreditation across multiple industry security standards and customer security expectations.

Desired Attributes:

• Experience: 8–10+ years of engineering experience, with a proven track record of designing and scaling DevSecOps strategies at an enterprise level.

• Scale Expertise: Mastery of large-scale distributed systems, multi-cloud or hybrid-cloud environments, and complex enterprise Kubernetes topologies.

• Leadership & Influence: Demonstrated ability to influence engineering culture, align cross-functional teams, and translate complex technical security concepts to non-technical stakeholders.

• Deep Systems Knowledge: Advanced expertise in identity systems (OIDC, OAuth, Active Directory) and secrets management infrastructure (HashiCorp Vault, AWS Secrets Manager) at scale.

• Certifications (Preferred): Certified Kubernetes Security Specialist (CKS), CCSP, or advanced cloud provider architecture credentials.