Senior DevOps Lead

Role Summary

We are looking for a DevOps Lead to own our DevOps and DevSecOps strategy across on-premise, cloud, and hybrid environments. You will set the technical direction for infrastructure automation, CI/CD, observability, and security. You will lead a team of engineers and make sure our platforms are scalable, resilient, secure, and compliant.

Key Responsibilities

Leadership and Strategy

• Define and own the DevOps, DevSecOps, and platform engineering roadmap.
• Lead, mentor, and grow a team of DevOps/SRE engineers, setting standards for code review, on-call, and incident management.
• Partner with engineering, security, product, and leadership on architecture, capacity planning, and cost optimization (FinOps).
• Own vendor and tooling decisions, budgets, and build-vs-buy evaluations.
  
  

Infrastructure and Automation

• Architect and govern scalable CI/CD pipelines for on-prem, cloud (AWS/Azure/GCP), and hybrid environments.
• Drive Infrastructure-as-Code adoption (Terraform, Ansible, Pulumi) with reusable modules, state management, and drift detection.
• Lead container orchestration strategy with Docker and Kubernetes, including multi-cluster and multi-region setups.
• Design and operate hybrid workloads using orchestrators such as Anthos or Azure Arc.
  
  

DevSecOps and Security

• Embed security into the SDLC with SAST, DAST, SCA, container and IaC scanning, secrets management, and SBOM/supply-chain security (SLSA, image signing).
• Implement Zero Trust architecture, IAM least-privilege, encryption (at rest and in transit), key management, and network segmentation.
• Enforce policy-as-code using OPA/Gatekeeper, Kyverno, or HashiCorp Sentinel.
• Run risk assessments, threat modeling, vulnerability management, and patch governance with defined remediation SLAs.
• Own compliance readiness and audits for ISO 27001, SOC 2, HIPAA, and similar frameworks.
  
  

Reliability and Observability

• Establish SLOs/SLIs, error budgets, and an observability stack (Prometheus, Grafana, ELK, OpenTelemetry).
• Lead incident response, postmortems, and continuous reliability improvements.
• Own disaster recovery and business continuity planning, including regular failover testing with defined RTO/RPO.
  
  

Required Qualifications

• Bachelor's or Master's degree in Computer Science, Engineering, or a related field.
• 15+ years in DevOps, SRE, or infrastructure engineering, with at least 4 years leading teams or platforms.
• Deep expertise across on-prem infrastructure and at least two of AWS, Azure, and GCP.
• Expert scripting and automation skills in Bash, Python, or Go.
• Production experience with CI/CD tools (Jenkins, GitLab CI/CD, ArgoCD, CircleCI) and GitOps practices.
• Strong command of networking, firewalls, VPNs, DNS, and load balancing.
• Proven DevSecOps track record: Zero Trust, IAM, PKI, encryption, auditing, and compliance frameworks (ISO 27001, SOC 2, HIPAA).
• Experience designing large-scale Kubernetes platforms in production.
• Strong stakeholder communication, including the ability to present risk and strategy to senior leadership.
  
  

Preferred Qualifications

• Certifications: CKA/CKS, AWS DevOps Professional, AWS/Azure Security Specialty, CISSP, CCSP.
• Experience with service mesh (Istio, Linkerd), eBPF-based security tooling, and runtime protection (Falco).
• Experience with security tooling such as Vault, Trivy, Snyk, SonarQube, and Wiz/Prisma Cloud.
• Experience leading cloud migrations or on-prem to hybrid transformations.
• Exposure to FinOps and platform-as-a-product practices.
  
  

Personal Attributes

• Strategic thinker who stays hands-on when needed.
• Strong analytical and troubleshooting skills under pressure.
• Clear communicator who builds trust across engineering and security teams.
• Passion for automation, resilience, and secure-by-design systems.
  
  

What We Offer

• A modern cloud-native and hybrid infrastructure stack.
• Real ownership and influence on platform and security strategy.
• Health benefits, flexible work options, and the latest hardware.
• A growth path toward Head of Platform, Director of Engineering (Infrastructure), or Principal Architect.