About the Role:
Grade Level (for internal use):
12 The Team:
Our Corporate Technology team serves as the centralized platform engineering function, establishing enterprise-wide DevSecOps standards and architectural patterns that enable secure, scalable software delivery across all business units. We are the strategic technology backbone that empowers global development teams through standardized platforms, governance frameworks, and innovative open-source solutions. The team values technical excellence, cross-functional collaboration, and driving organizational impact through thoughtful architecture decisions that balance security, compliance, and developer productivity.
The Role:
The DevSecOps Architect provides enterprise-level technical leadership for secure software delivery, cloud-native platforms, and developer enablement. This role defines DevSecOps strategy, reference architectures, engineering standards, and reusable platform capabilities that integrate security throughout the software development lifecycle. The architect partners with engineering, cybersecurity, infrastructure, risk, and business leaders to improve delivery speed, resilience, compliance, and developer experience.
Key Responsibilities
Define and lead the enterprise DevSecOps architecture, roadmap, and adoption strategy — designing secure, scalable CI/CD patterns and paved-road developer capabilities across cloud, hybrid, container, and orchestration environments, with governance models that drive consistent adoption across engineering value streams.
Embed automated security controls across the full software development lifecycle — including static and dynamic code analysis (SAST/DAST), software composition analysis (SCA), secrets detection, artifact integrity verification, container scanning, infrastructure-as-code policy scanning, and runtime protection — translating cybersecurity and compliance control requirements into automated, auditable guardrails.
Establish and govern architecture standards for source control, build automation, artifact management, release orchestration, observability, vulnerability management, and software supply-chain security — providing authoritative technical direction across developer tooling platforms and self-service capabilities.
Lead architecture reviews, threat modeling sessions, design decisions, and proofs of concept — authoring reference architectures, engineering standards, architecture decision records (ADRs), and roadmaps that enable engineering and senior leadership to make defensible, evidence-based platform decisions.
Drive platform reliability, resilience, and operational readiness through measurable engineering practices — defining and monitoring DORA metrics including deployment frequency, lead time, change failure rate, mean time to recovery, security findings density, and developer productivity benchmarks.
Mentor architects and engineers and build communities of practice that accelerate enterprise-wide DevSecOps adoption — influencing senior stakeholders without direct authority and advancing developer experience so that secure delivery is the default, not an additional step.
What We're Looking For:
Required Qualifications
Experience: 7+ years of experience in DevSecOps, cloud architecture, platform engineering, or cybersecurity engineering — including demonstrated leadership of enterprise-scale DevSecOps transformation initiatives or large-scale platform architecture programs
CI/CD & Platform Engineering: Hands-on production experience designing and operating enterprise CI/CD pipelines using Git-based source control platforms, artifact management repositories, container orchestration technologies such as Kubernetes, and infrastructure-as-code tooling such as Terraform — with version control discipline and automated policy validation at scale
Security Engineering across the SDLC: Demonstrated production experience embedding automated security controls across the software development lifecycle —…