Head of DevSecOps

Head of DevSecOps We are looking for a hands-on DevOps Lead with deep security expertise and a product company background. This is a leadership role — you will set technical direction, own our Azure infrastructure and security posture, and drive DevOps maturity across teams. Equally important, you will stay close to the work: writing Terraform, reviewing pipelines, and solving hard infrastructure problems alongside your team. What You'll Do Lead DevOps strategy and execution — CI/CD, IaC, containerization, SaaS delivery, and cloud operations. Own end-to-end security posture: IAM, secrets management, network segmentation, and compliance — hands-on, not just oversight. Define and enforce Terraform-based IaC standards across all environments. Drive containerization and orchestration strategy across Docker and Kubernetes. Set up and own observability pipelines; define SLOs and lead incident response. Mentor engineers, run design reviews, and raise the team's overall DevOps and security maturity. Collaborate with product, engineering, and client-facing teams on infrastructure decisions. Requirements Experience 10+ years in DevOps, Cloud Engineering, or SRE role — with at least 2 years in a lead or principal capacity. Hands-on background at a product company is required; you should be as comfortable in the terminal as you are in a design review. Proven track record managing SaaS infrastructure at scale, including multi-tenant environments and release pipelines. Security & Networking (Required) End-to-end cloud security ownership — firewall configuration, DMZ design, VPN, and network segmentation. Enterprise SSO, LDAP/Active Directory, and identity federation (SAML, OAuth 2.0, OIDC). Secrets management using Azure Key Vault or HashiCorp Vault. IAM: least-privilege access, role-based policies, and audit logging. Working knowledge of compliance frameworks such as SOC 2 or ISO 27001. Cloud & Infrastructure as Code Strong hands-on Azure experience; familiarity with AWS or GCP a plus. Terraform — writing modules, managing state, enforcing IaC across environments. Experience managing VMs, VNets, subnets, security groups, load balancers, and storage in Azure. CI/CD & Automation Azure DevOps for CI/CD pipeline design and maintenance; GitHub Actions or Jenkins a plus. Scripting in Bash and Python. Build tools: Maven or Gradle. Containers & Orchestration Docker — image design, multi-stage builds, registry management. Kubernetes — cluster management, Helm, RBAC, namespaces, and rolling deployments. Observability & Reliability ELK Stack for centralized logging; Prometheus, Grafana, Datadog, or Azure Monitor for metrics and alerting. Experience defining SLOs/SLIs and owning incident response. Application & OS Strong Linux/Unix administration. Nginx, Apache, or Tomcat configuration experience. Working knowledge of Java or another programming language sufficient to support development teams. Nice to Have GitOps workflows using ArgoCD or Flux. Service mesh (Istio, Linkerd) or API gateway experience. Cloud cost optimization experience.