DevOps Lead – DevSecOps & Platform Engineering

About the Role

We are looking for an experienced DevOps Lead – DevSecOps & Platform Engineering to define and lead our DevOps, DevSecOps, and platform engineering strategy across on-premises, cloud, and hybrid environments.

In this leadership role, you will drive infrastructure automation, CI/CD, Kubernetes platforms, cloud operations, security engineering, and reliability initiatives. You will lead and mentor engineering teams while ensuring platforms remain scalable, resilient, secure, compliant, and cost-efficient.

The ideal candidate combines deep hands-on technical expertise with strategic leadership, strong stakeholder management, and experience operating large-scale production infrastructure.

Key Responsibilities

1. Leadership & Platform Strategy

Define and execute the DevOps, DevSecOps, SRE, and platform engineering roadmap.
Lead, mentor, and develop DevOps/SRE engineers, establishing engineering standards for code reviews, on-call operations, and incident management.
Collaborate with engineering, security, product, and executive leadership on architecture, capacity planning, and infrastructure cost optimization.
Own technology selection, vendor management, tooling budgets, and build-versus-buy decisions.
Drive platform standardization, automation, and continuous operational improvement.

2. Infrastructure, Cloud & Automation

Architect and govern scalable CI/CD pipelines across on-premises, cloud (AWS, Azure, GCP), and hybrid environments.
Drive Infrastructure as Code (IaC) adoption using Terraform, Ansible, or Pulumi, including reusable modules, state management, and configuration drift detection.
Lead containerization and Kubernetes platform strategy, including multi-cluster and multi-region deployments.
Design and manage hybrid cloud workloads using platforms such as Google Anthos or Azure Arc.
Build and maintain automated infrastructure provisioning, configuration management, deployment, and rollback processes.
Establish GitOps-based delivery practices using tools such as Argo CD and related CI/CD platforms.
Ensure infrastructure scalability, availability, performance, and operational efficiency.

3. DevSecOps, Security & Compliance

Integrate security into the software development lifecycle through SAST, DAST, SCA, container scanning, IaC scanning, and secrets management.
Implement software supply-chain security practices, including SBOM generation, SLSA principles, and container image signing.
Enforce Zero Trust architecture, least-privilege IAM, encryption at rest and in transit, key management, and network segmentation.
Implement policy as code using OPA/Gatekeeper, Kyverno, or HashiCorp Sentinel.
Lead risk assessments, threat modeling, vulnerability management, patch governance, and remediation tracking against defined SLAs.
Establish security controls, audit readiness, and compliance processes aligned with ISO 27001, SOC 2, HIPAA, and other applicable frameworks.
Partner with security and compliance teams to strengthen infrastructure governance and secure-by-design engineering practices.

4. Reliability, Observability & Incident Management

Define and implement Service Level Objectives (SLOs), Service Level Indicators (SLIs), and error budgets.
Establish observability across infrastructure and applications using Prometheus, Grafana, ELK Stack, and OpenTelemetry.
Lead incident response, root cause analysis, postmortems, and corrective action tracking.
Develop strategies to improve availability, performance, fault tolerance, and production reliability.
Own disaster recovery (DR) and business continuity planning, including regular failover and recovery testing against defined RTO and RPO targets.
Establish operational metrics and continuously improve platform reliability and engineering productivity.

5. Networking, Governance & Cost Optimization

Oversee infrastructure networking, including firewalls, VPNs, DNS, load balancing, and network security controls.
Drive infrastructure capacity planning, resource utilization, and cloud cost optimization through FinOps practices.
Establish governance standards for infrastructure provisioning, deployment workflows, access controls, and operational processes.
Communicate platform risks, security posture, reliability metrics, and technology roadmaps to senior leadership.

Required Qualifications

Bachelor's or Master's degree in Computer Science, Engineering, or a related discipline.
15+ years of experience in DevOps, SRE, infrastructure engineering, or platform engineering, including at least 4 years leading engineering teams or platforms.
Deep expertise in on-premises infrastructure and hands-on experience with at least two major cloud platforms: AWS, Microsoft Azure, or Google Cloud Platform (GCP).
Strong scripting and automation skills in Bash, Python, or Go.
Production experience with CI/CD tools such as Jenkins, GitLab CI/CD, Argo CD, or CircleCI, along with GitOps practices.
Extensive experience designing and operating large-scale Kubernetes platforms in production, including container orchestration and cluster management.
Strong Infrastructure as Code experience using Terraform, Ansible, Pulumi, or equivalent tools.
Proven DevSecOps expertise across Zero Trust, IAM, PKI, encryption, secrets management, vulnerability management, and security auditing.
Practical understanding of compliance frameworks such as ISO 27001, SOC 2, and HIPAA.
Strong knowledge of networking fundamentals, firewalls, VPNs, DNS, load balancing, and network segmentation.
Experience defining reliability standards, observability practices, incident response, and disaster recovery processes.
Excellent communication and stakeholder management skills, with the ability to present technical strategy, operational risks, and investment priorities to senior leadership.

Preferred Qualifications

Relevant certifications such as CKA, CKS, AWS Certified DevOps Engineer – Professional, AWS/Azure Security Specialty, CISSP, or CCSP.
Experience with service mesh technologies such as Istio or Linkerd.
Familiarity with eBPF-based security tooling and runtime protection solutions such as Falco.
Experience with security and vulnerability management tools such as HashiCorp Vault, Trivy, Snyk, SonarQube, Wiz, or Prisma Cloud.
Proven experience leading cloud migrations, data center modernization, or on-premises-to-hybrid cloud transformations.
Exposure to FinOps, platform-as-a-product models, and developer self-service platforms.
Experience establishing engineering governance, security policies, and operational best practices across multiple teams.

Personal Attributes

Strategic thinker with the ability to remain hands-on when required.
Strong analytical, troubleshooting, and decision-making skills under pressure.
Clear communicator who builds trust across engineering, security, and business teams.
Collaborative leader who develops teams and drives accountability.
Passionate about automation, operational excellence, resilience, and secure-by-design systems.

Role Highlights

Lead DevOps, DevSecOps, and platform engineering strategy.
Drive cloud, on-premises, and hybrid infrastructure modernization.
Build secure, scalable, and highly available Kubernetes platforms.
Influence engineering standards, security governance, and reliability practices.
Partner with senior leadership on technology strategy and cost optimization.

Senior Lead - DevSecOps

Start with your email