DevSecOps Lead

Job summary

Lead the architecture, governance, security, and lifecycle management of an enterprise DevOps toolchain. Own upgrades, disaster recovery, access controls, artifact management, and NERC-CIP compliance, while coordinating change management, audits, vendor relationships, and license renewals. The environment includes GitHub Enterprise, JFrog Artifactory and Xray, security scanning tools, OpenShift/Kubernetes, Docker, and integrations such as Jira and ServiceNow.

Qualifications

• At least 6 years of experience with DevOps methodologies
• Hands-on experience with CI/CD tools and frameworks
• Administer GitHub Enterprise and automate repository and project onboarding
• Experience with JFrog Artifactory/Xray, Coverity, Black Duck, and SRM
• Experience with OpenShift/Kubernetes, Docker, base images, platform upgrades, migrations, backups, and disaster recovery
• Use Python, PowerShell, Shell, and YAML for administration and remediation automation
• Knowledge of LDAP/AD, SSO, RBAC design, and CyberArk/password rotation
• Experience with tool evaluations, integration design, stakeholder management, change management, documentation, and vendor and license management

Responsibilities

• Own architecture, upgrade cadence, release plans, backout procedures, and test-to-production promotion for the enterprise DevOps toolchain
• Maintain disaster recovery plans, runbooks, and tests
• Redesign role-based access across GitHub, Artifactory, and security scanning tools
• Define repository structures, snapshot and release handling, and artifact promotion processes
• Drive NERC-CIP compliance, password rotation, LDAP and service account changes, audit support, and asset ownership tracking
• Coordinate organizational change management, including pilots, training, and communications
• Manage license renewals, cost estimates, and vendor relationships

Skills

Languages

Relocation