Head of DevSecOps

Head of DevSecOps

We are looking for a hands-on DevOps Lead with deep security expertise and a product company background. This is a leadership role — you will set technical direction, own our Azure infrastructure and security posture, and drive DevOps maturity across teams. Equally important, you will stay close to the work: writing Terraform, reviewing pipelines, and solving hard infrastructure problems alongside your team.

What You'll Do

• Lead DevOps strategy and execution — CI/CD, IaC, containerization, SaaS delivery, and cloud operations.

• Own end-to-end security posture: IAM, secrets management, network segmentation, and compliance — hands-on, not just oversight.

• Define and enforce Terraform-based IaC standards across all environments.

• Drive containerization and orchestration strategy across Docker and Kubernetes.

• Set up and own observability pipelines; define SLOs and lead incident response.

• Mentor engineers, run design reviews, and raise the team's overall DevOps and security maturity.

• Collaborate with product, engineering, and client-facing teams on infrastructure decisions.

Requirements

Experience

• 10+ years in DevOps, Cloud Engineering, or SRE role — with at least 2 years in a lead or principal capacity.

• Hands-on background at a product company is required; you should be as comfortable in the terminal as you are in a design review.

• Proven track record managing SaaS infrastructure at scale, including multi-tenant environments and release pipelines.

Security & Networking (Required)

• End-to-end cloud security ownership — firewall configuration, DMZ design, VPN, and network segmentation.

• Enterprise SSO, LDAP/Active Directory, and identity federation (SAML, OAuth 2.0, OIDC).

• Secrets management using Azure Key Vault or HashiCorp Vault.

• IAM: least-privilege access, role-based policies, and audit logging.

• Working knowledge of compliance frameworks such as SOC 2 or ISO 27001.

Cloud & Infrastructure as Code

• Strong hands-on Azure experience; familiarity with AWS or GCP a plus.

• Terraform — writing modules, managing state, enforcing IaC across environments.

• Experience managing VMs, VNets, subnets, security groups, load balancers, and storage in Azure.

CI/CD & Automation

• Azure DevOps for CI/CD pipeline design and maintenance; GitHub Actions or Jenkins a plus.

• Scripting in Bash and Python. Build tools: Maven or Gradle.

Containers & Orchestration

• Docker — image design, multi-stage builds, registry management.

• Kubernetes — cluster management, Helm, RBAC, namespaces, and rolling deployments.

Observability & Reliability

• ELK Stack for centralized logging; Prometheus, Grafana, Datadog, or Azure Monitor for metrics and alerting.

• Experience defining SLOs/SLIs and owning incident response.

Application & OS

• Strong Linux/Unix administration. Nginx, Apache, or Tomcat configuration experience.

• Working knowledge of Java or another programming language sufficient to support development teams.

Nice to Have

• GitOps workflows using ArgoCD or Flux.

• Service mesh (Istio, Linkerd) or API gateway experience.

• Cloud cost optimization experience.