Staff DevSecOps Engineer at FIA Tech | NY, US | Rezi

Staff DevSecOps Engineer at FIA Tech

Staff DevSecOps Engineer

FIA Tech · NY, US

3 weeks ago

Staff DevSecOps Engineer

FIA Tech · NY, US

25 days ago
Resume preview

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now
Resume preview

Tailor your resume to this Staff DevSecOps Engineer role.

Rezi rewrites your resume against FIA Tech's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Staff DevSecOps Engineer posting at FIA Tech — free, in seconds.

About the Role

Serve as a core contributor to the security and cloud platforms, defining standards, frameworks, and the long-term vision for secure software engineering across the enterprise. Partner with Technology Operations to solve complex technical challenges at scale and drive organizational change.

Responsibilities

  • Provide a strong voice in the security of an enterprise-wide, multi-region SaaS platform, IAM governance strategies, and zero-trust cloud architectures.
  • Build a security platform that abstracts complex security operations, allowing developers to deploy secure, compliant workloads seamlessly.
  • Define and enforce enterprise compliance frameworks utilizing Policy-as-Code tooling such as Open Policy Agent (OPA) or Kyverno across all infrastructure and Kubernetes environments.
  • Champion a security-first culture across the broader organization, conduct architectural reviews and threat modelling exercises for mission-critical services.
  • Partner with engineering leadership to define and embed security throughout the software development lifecycle, including secure coding practices, application security testing, software supply chain security, and developer enablement.
  • Evolve and mature vulnerability management, cloud security posture management, and risk reduction programs, using automation and measurable outcomes to drive organizational security improvements.
  • Evaluate, pilot, and negotiate foundational enterprise security tools, using industry-standard metrics and KPIs to measure the effectiveness of our global security posture.
  • Lead strategic application & cloud security initiatives across multi-cloud and Kubernetes environments, shaping enterprise security architecture, identity governance, and long-term security roadmaps.
  • Partner with compliance and legal to ensure accreditation across multiple industry security standards and customer security expectations.

Requirements

  • 8–10+ years of engineering experience, with a proven track record of designing and scaling DevSecOps strategies at an enterprise level.
  • Mastery of large-scale distributed systems, multi-cloud or hybrid-cloud environments, and complex enterprise Kubernetes topologies.
  • Demonstrated ability to influence engineering culture, align cross-functional teams, and translate complex technical security concepts to non-technical stakeholders.
  • Advanced expertise in identity systems (OIDC, OAuth, Active Directory) and secrets management infrastructure (HashiCorp Vault, AWS Secrets Manager) at scale.

Skills

  • DevSecOps
  • SaaS platform security
  • IAM governance
  • Zero-trust cloud architectures
  • Policy-as-Code
  • Open Policy Agent (OPA)
  • Kyverno
  • Kubernetes
  • Secure coding practices
  • Application security testing
  • Software supply chain security
  • Vulnerability management
  • Cloud security posture management
  • OIDC
  • OAuth
  • Active Directory
  • HashiCorp Vault
  • AWS Secrets Manager

Experience Level

  • Staff

Education Level

  • Certified Kubernetes Security Specialist (CKS)
  • CCSP
  • Advanced cloud provider architecture credentials