Associate Director, DevSecOps Architect

S&P Global•Princeton, NJ

21h

About The Position

The DevSecOps Architect provides enterprise-level technical leadership for secure software delivery, cloud-native platforms, and developer enablement. The role defines DevSecOps strategy, reference architectures, engineering standards, and reusable platform capabilities that integrate security throughout the software development lifecycle. The architect partners with engineering, cybersecurity, infrastructure, risk, and business leaders to improve delivery speed, resilience, compliance, and developer experience. The Corporate Technology team is the centralized platform engineering function, establishing enterprise-wide DevSecOps standards and architectural patterns to enable secure, scalable software delivery across business units. It supports global development teams with standardized platforms, governance frameworks, and open-source solutions.

Requirements

At least 7 years of experience in DevSecOps, cloud architecture, platform engineering, or cybersecurity engineering, including demonstrated leadership of enterprise-scale DevSecOps transformation initiatives or large-scale platform architecture programs.
Hands-on production experience designing and operating enterprise CI/CD pipelines using Git-based source control platforms, artifact management repositories, container orchestration technologies such as Kubernetes, and infrastructure-as-code tooling such as Terraform.
Experience applying version control discipline and automated policy validation at scale.
Production experience embedding automated SDLC security controls, including SAST/DAST, SCA, secrets detection, container image scanning, and policy-as-code enforcement technologies such as OPA or Kyverno.
Hands-on production experience with at least one major cloud platform (AWS, Azure, or GCP), including cloud-native IAM, secrets management such as HashiCorp Vault or AWS Secrets Manager, network security, and vulnerability management in regulated or enterprise-scale environments.
Bachelor’s degree in computer science, engineering, cybersecurity, information systems, or equivalent practical experience.

Nice To Haves

Experience working in a regulated or security-sensitive enterprise environment, such as financial services or fintech.
Experience with managed container orchestration services such as Amazon EKS in production enterprise environments.
Experience with zero-trust architecture principles, SRE practices, and developer self-service platform design.
Relevant certifications in cloud security, container orchestration, DevOps, or cybersecurity, such as AWS Security Specialty, CKS, or CISSP, or equivalent.
Experience with software supply-chain security practices and observability or SIEM platform integration.
Experience evaluating or implementing AI-assisted development tooling or automated security operations within DevSecOps pipelines.

Responsibilities

Define and lead enterprise DevSecOps architecture, roadmap, and adoption strategy, including secure, scalable CI/CD patterns and paved-road developer capabilities across cloud, hybrid, container, and orchestration environments.
Establish governance models that promote consistent adoption across engineering value streams.
Embed automated security controls across the software development lifecycle, including SAST/DAST, SCA, secrets detection, artifact integrity verification, container scanning, infrastructure-as-code policy scanning, and runtime protection.
Translate cybersecurity and compliance control requirements into automated, auditable guardrails.
Establish and govern architecture standards for source control, build automation, artifact management, release orchestration, observability, vulnerability management, and software supply-chain security.
Provide authoritative technical direction across developer tooling platforms and self-service capabilities.
Lead architecture reviews, threat modeling sessions, design decisions, and proofs of concept.
Author reference architectures, engineering standards, architecture decision records, and roadmaps to support defensible, evidence-based platform decisions.
Drive platform reliability, resilience, and operational readiness through measurable engineering practices.
Define and monitor DORA metrics, including deployment frequency, lead time, change failure rate, mean time to recovery, security findings density, and developer productivity benchmarks.
Mentor architects and engineers and build communities of practice to accelerate enterprise-wide DevSecOps adoption.
Influence senior stakeholders without direct authority and advance developer experience so secure delivery is the default.