Senior Lead - DevSecOps

DevOps Lead – DevSecOps & Platform Engineering

About the Role

We are looking for an experienced DevOps Lead – DevSecOps & Platform Engineering to define and lead our DevOps, DevSecOps, and platform engineering strategy across on-premises, cloud, and hybrid environments.

In this leadership role, you will drive infrastructure automation, CI/CD, Kubernetes platforms, cloud operations, security engineering, and reliability initiatives. You will lead and mentor engineering teams while ensuring platforms remain scalable, resilient, secure, compliant, and cost-efficient.

The ideal candidate combines deep hands-on technical expertise with strategic leadership, strong stakeholder management, and experience operating large-scale production infrastructure.

Key Responsibilities

1. Leadership & Platform Strategy

• 
  

  Define and execute the DevOps, DevSecOps, SRE, and platform engineering roadmap.

  
  


• 
  

  Lead, mentor, and develop DevOps/SRE engineers, establishing engineering standards for code reviews, on-call operations, and incident management.

  
  


• 
  

  Collaborate with engineering, security, product, and executive leadership on architecture, capacity planning, and infrastructure cost optimization.

  
  


• 
  

  Own technology selection, vendor management, tooling budgets, and build-versus-buy decisions.

  
  


• 
  

  Drive platform standardization, automation, and continuous operational improvement.

  
  

2. Infrastructure, Cloud & Automation

• 
  

  Architect and govern scalable CI/CD pipelines across on-premises, cloud (AWS, Azure, GCP), and hybrid environments.

  
  


• 
  

  Drive Infrastructure as Code (IaC) adoption using Terraform, Ansible, or Pulumi, including reusable modules, state management, and configuration drift detection.

  
  


• 
  

  Lead containerization and Kubernetes platform strategy, including multi-cluster and multi-region deployments.

  
  


• 
  

  Design and manage hybrid cloud workloads using platforms such as Google Anthos or Azure Arc.

  
  


• 
  

  Build and maintain automated infrastructure provisioning, configuration management, deployment, and rollback processes.

  
  


• 
  

  Establish GitOps-based delivery practices using tools such as Argo CD and related CI/CD platforms.

  
  


• 
  

  Ensure infrastructure scalability, availability, performance, and operational efficiency.

  
  

3. DevSecOps, Security & Compliance

• 
  

  Integrate security into the software development lifecycle through SAST, DAST, SCA, container scanning, IaC scanning, and secrets management.

  
  


• 
  

  Implement software supply-chain security practices, including SBOM generation, SLSA principles, and container image signing.

  
  


• 
  

  Enforce Zero Trust architecture, least-privilege IAM, encryption at rest and in transit, key management, and network segmentation.

  
  


• 
  

  Implement policy as code using OPA/Gatekeeper, Kyverno, or HashiCorp Sentinel.

  
  


• 
  

  Lead risk assessments, threat modeling, vulnerability management, patch governance, and remediation tracking against defined SLAs.

  
  


• 
  

  Establish security controls, audit readiness, and compliance processes aligned with ISO 27001, SOC 2, HIPAA, and other applicable frameworks.

  
  


• 
  

  Partner with security and compliance teams to strengthen infrastructure governance and secure-by-design engineering practices.

  
  

4. Reliability, Observability & Incident Management

• 
  

  Define and implement Service Level Objectives (SLOs), Service Level Indicators (SLIs), and error budgets.

  
  


• 
  

  Establish observability across infrastructure and applications using Prometheus, Grafana, ELK Stack, and OpenTelemetry.

  
  


• 
  

  Lead incident response, root cause analysis, postmortems, and corrective action tracking.

  
  


• 
  

  Develop strategies to improve availability, performance, fault tolerance, and production reliability.

  
  


• 
  

  Own disaster recovery (DR) and business continuity planning, including regular failover and recovery testing against defined RTO and RPO targets.

  
  


• 
  

  Establish operational metrics and continuously improve platform reliability and engineering productivity.

  
  

5. Networking, Governance & Cost Optimization

• 
  

  Oversee infrastructure networking, including firewalls, VPNs, DNS, load balancing, and network security controls.

  
  


• 
  

  Drive infrastructure capacity planning, resource utilization, and cloud cost optimization through FinOps practices.

  
  


• 
  

  Establish governance standards for infrastructure provisioning, deployment workflows, access controls, and operational processes.

  
  


• 
  

  Communicate platform risks, security posture, reliability metrics, and technology roadmaps to senior leadership.

  
  

Required Qualifications

• 
  

  Bachelor's or Master's degree in Computer Science, Engineering, or a related discipline.

  
  


• 
  

  15+ years of experience in DevOps, SRE, infrastructure engineering, or platform engineering, including at least 4 years leading engineering teams or platforms.

  
  


• 
  

  Deep expertise in on-premises infrastructure and hands-on experience with at least two major cloud platforms: AWS, Microsoft Azure, or Google Cloud Platform (GCP).

  
  


• 
  

  Strong scripting and automation skills in Bash, Python, or Go.

  
  


• 
  

  Production experience with CI/CD tools such as Jenkins, GitLab CI/CD, Argo CD, or CircleCI, along with GitOps practices.

  
  


• 
  

  Extensive experience designing and operating large-scale Kubernetes platforms in production, including container orchestration and cluster management.

  
  


• 
  

  Strong Infrastructure as Code experience using Terraform, Ansible, Pulumi, or equivalent tools.

  
  


• 
  

  Proven DevSecOps expertise across Zero Trust, IAM, PKI, encryption, secrets management, vulnerability management, and security auditing.

  
  


• 
  

  Practical understanding of compliance frameworks such as ISO 27001, SOC 2, and HIPAA.

  
  


• 
  

  Strong knowledge of networking fundamentals, firewalls, VPNs, DNS, load balancing, and network segmentation.

  
  


• 
  

  Experience defining reliability standards, observability practices, incident response, and disaster recovery processes.

  
  


• 
  

  Excellent communication and stakeholder management skills, with the ability to present technical strategy, operational risks, and investment priorities to senior leadership.

  
  

Preferred Qualifications

• 
  

  Relevant certifications such as CKA, CKS, AWS Certified DevOps Engineer – Professional, AWS/Azure Security Specialty, CISSP, or CCSP.

  
  


• 
  

  Experience with service mesh technologies such as Istio or Linkerd.

  
  


• 
  

  Familiarity with eBPF-based security tooling and runtime protection solutions such as Falco.

  
  


• 
  

  Experience with security and vulnerability management tools such as HashiCorp Vault, Trivy, Snyk, SonarQube, Wiz, or Prisma Cloud.

  
  


• 
  

  Proven experience leading cloud migrations, data center modernization, or on-premises-to-hybrid cloud transformations.

  
  


• 
  

  Exposure to FinOps, platform-as-a-product models, and developer self-service platforms.

  
  


• 
  

  Experience establishing engineering governance, security policies, and operational best practices across multiple teams.

  
  

Personal Attributes

• 
  

  Strategic thinker with the ability to remain hands-on when required.

  
  


• 
  

  Strong analytical, troubleshooting, and decision-making skills under pressure.

  
  


• 
  

  Clear communicator who builds trust across engineering, security, and business teams.

  
  


• 
  

  Collaborative leader who develops teams and drives accountability.

  
  


• 
  

  Passionate about automation, operational excellence, resilience, and secure-by-design systems.

  
  

Role Highlights

• 
  

  Lead DevOps, DevSecOps, and platform engineering strategy.

  
  


• 
  

  Drive cloud, on-premises, and hybrid infrastructure modernization.

  
  


• 
  

  Build secure, scalable, and highly available Kubernetes platforms.

  
  


• 
  

  Influence engineering standards, security governance, and reliability practices.

  
  


• 
  

  Partner with senior leadership on technology strategy and cost optimization.