Lead Site Reliability Engineer

Trimble; Chennai District; On-site; INR 3,500,000 - 6,000,000; Full time

Benefits offered by this job

Flexible work arrangements

Job summary

Trimble is seeking a P3 Lead AI SecOps Engineer to own the AI-driven security strategy for our Azure platform. You will oversee security architecture, resilience, and automated compliance across a 22,000+ Windows VM and 3,000+ SQL Server estate, combining SRE, Zero Trust, and AI automation.

You will lead a global engineering team, drive multi-year roadmaps, and mentor staff across North America and India while partnering with executives on risk and compliance metrics.

Qualifications

• 8+ years in cloud security, SRE, or enterprise SecOps.
• Deep Azure, Defender, Sentinel, Policy, WAF knowledge.
• Hands-on with Windows Server & MS SQL Server security.
• Experience with enterprise patch management tools.
• Vulnerability management and regulatory standards knowledge.
• Automation and DevSecOps with scripting and IaC.
• Bachelor’s in CS/IT; Master’s preferred; relevant certifications a plus.

Responsibilities

• Own AI-driven SecOps strategy and multi-year roadmap.
• Define security architecture, governance, and exceptions.
• Lead global patch governance and autonomous rollout strategies.
• Oversee Azure landing zone security, RBAC, and WAF thresholds.
• Direct CVE analysis, remediation, and posture reporting to execs.
• Drive disaster recovery, compliance (ISO 27001, SOC 2), and audits.
• Mentor global engineering teams and lead DevSecOps automation.

Skills

Cloud security

SRE leadership

Zero Trust

AI automation

Executive communication

Education

Bachelor's in CS/IT or related

Master's preferred

Tools

Azure DevOps

Terraform

PowerShell

Python

GitHub

NinjaOne

SCCM/MECM

WSUS

Job description

Pioneer Autonomous Security Scale as a Lead AI SecOps Engineer

Are you an experienced cloud security and SRE leader ready to own the AI-driven SecOps strategy for a massive global infrastructure? Trimble is seeking a P3 Lead AI SecOps Engineer to oversee the security architecture, resilience, and automated compliance across our enterprise Azure platform.

Operating across a large-scale estate of 22,000+ Windows Virtual Machines and 3,000+ Microsoft SQL Servers, you will combine Site Reliability Engineering (SRE), Zero Trust architecture, and AI-driven automation to ensure our systems remain secure, compliant, and highly available.

About Us:

Dedicated to the world's tomorrow, Trimble is a technology company delivering solutions that enable our customers to work in new ways to measure, build, grow and move goods for a better quality of life. Core technologies in positioning, modeling, connectivity and data analytics connect the digital and physical worlds to improve productivity, quality, safety, transparency and sustainability. From purpose-built products and enterprise lifecycle solutions to industry cloud services, Trimble is transforming critical industries such as construction, geospatial, agriculture and transportation to power an interconnected world of work. For more information about Trimble (NASDAQ: TRMB), visit: www.trimble.com.

Our SecOps Ecosystem:

Our Global AI Site Reliability & Security Operations (AI-SecOps) team integrates cutting-edge AI tools, autonomous patch orchestration, and DevSecOps pipelines to safeguard Trimble's enterprise infrastructure, ensuring compliance with global benchmarks while protecting global customer workflows.

What Makes This Role Great:

As a P3 Lead Engineer reporting directly to the Director of Engineering / Head of Cloud Security, you will have end-to-end strategy ownership for multi-year security roadmaps, autonomous patching frameworks, and AI-driven CVE remediation. Supporting a follow-the-sun model across North America and India, you will serve as a primary technical authority in executive forums, shape Zero Trust adoption, and mentor a high-performing global engineering team. This position offers a high-visibility platform to transform enterprise-level SecOps using modern AI and automation capabilities.

Key Exciting Responsibilities

• Enterprise AI-SecOps Strategy: Own the AI-driven SecOps strategy and multi-year roadmap across our entire Azure infrastructure, setting architecture standards and defining security investment priorities.
• Windows & SQL Server Infrastructure Security: Define and govern enterprise security architecture and exception frameworks across 22,000+ Windows VMs and 3,000+ SQL Servers.
• Third-Party Patch Governance & AI Orchestration: Drive global third-party patch governance (across tools like NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, BigFix), defining autonomous ring-based rollouts and AI-assisted troubleshooting standards to eliminate deployment failures.
• Azure Governance, WAF & Zero Trust: Own enterprise Azure landing zone security, Azure Policy frameworks, RBAC models, Web Application Firewall (WAF) threat thresholds, and Zero Trust adoption.
• AI-Driven Vulnerability & CVE Remediation: Direct CVE analysis across platforms (Qualys, Tenable, Rapid7, Defender) and threat-intel feeds (NVD, MSRC), leveraging AI agents for triage and automated fix deployments while presenting posture metrics to executive leadership.
• Cloud Resilience & Global Audit Compliance: Direct DR/BCP strategies, RTO/RPO targets, and compliance execution for ISO 27001, SOC 2 Type II, NIST CSF/800-53, and CIS Benchmarks, serving as the lead technical stakeholder for security audits.
• Security Automation & Global Leadership: Champion security automation using PowerShell, Python, Terraform, and AI Copilots within CI/CD pipelines, while mentoring and leading cross-functional engineering teams across North America and India.

Essential Skills & Experience

• Professional Experience: 8+ years of dedicated experience in cloud security, SRE, or enterprise security operations, with proven success operating at 10,000+ endpoint scale.
• Cloud & Security Mastery: Deep technical proficiency in Azure, Microsoft Defender, Microsoft Sentinel, Azure Policy, WAF, and the Azure Well-Architected Framework.
• Infrastructure & Patch Tooling Expertise: Hands-on experience securing Windows Server and MS SQL Server ecosystems alongside enterprise patch management platforms (Azure Update Manager, NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, or BigFix).
• Vulnerability Management & Frameworks: Expert knowledge of CVE scoring, vulnerability scanners (Defender Vulnerability Management, Qualys, Tenable, Rapid7), and regulatory standards (ISO 27001, SOC 2 Type II, NIST CSF/800-53, CIS Benchmarks).
• Automation & DevOps: Proficient in PowerShell, Python, GitHub, Azure DevOps, Terraform, and leveraging AI/Copilot tools for DevSecOps automation.
• Education: Bachelor's degree in Computer Science, Information Technology, or a related field (Master's degree preferred).
• Bonus Points For: Certifications: Microsoft AZ-500, CISSP, Security+, or equivalent enterprise security credentials.
• Global Team Leadership: Track record of leading, mentoring, and growing global engineering teams across multiple regions and time zones.
• Executive Communication: Experience presenting security posture metrics, risk trade-offs, and compliance progress directly to C-suite and executive stakeholders.

Logistics:

• Grade / Level: P3
• Department: Global AI Site Reliability & Security Operations (AI-SecOps)
• Location: Chennai
• Job Type: Full-Time

Why You'll Love Working With Us

At Trimble, we're not just a company that does good- we are a team dedicated to making a tangible, positive Real-World Impact. We build innovative solutions designed to solve the world's most critical challenges. From construction sites to transportation hubs, our work tangibly improves how people live, build, move, and grow. You'll work on projects that truly matter: Our purpose-driven culture means you'll be helping to build and deliver solutions that make work faster, safer, and more sustainable for millions of people worldwide.

Collaborate with like-minded people:

Our strong internal culture is a "hidden gem." You will work with a collaborative, supportive team that shares your purpose and fosters a genuine sense of belonging. Be an owner: Trimble thrives on individuals who take initiative and embrace ownership. You'll find an entrepreneurial spirit where success is often "self-authored," empowering proactive "doers." Enjoy true flexibility: We offer flexible work arrangements, which are a significant driver for employees joining and staying with us.

Benefits:

• Enjoy true flexibility: We offer flexible work arrangements, which are a significant driver for employees joining and staying with us.

Join a Values-Driven Team: Belong, Grow, Innovate

Belong, Grow, and Innovate aren't just words—they're the foundation of our culture. We foster an environment where you are seen, heard, and valued (Belong); where you have an opportunity to build a career and drive our collective growth (Grow); and where your innovative ideas shape the future (Innovate). We believe in empowering local teams to create impactful strategies, ensuring our global vision resonates with every individual. Become part of a team where your contributions truly matter.

Candidate Privacy Notices by Country If you need assistance or would like to request an accommodation in connection with the application process, please contact [e-mail]. Trimble is transforming the way the world works by delivering products and services that connect the physical and digital worlds. Core technologies in positioning, modeling, connectivity and data analytics enable customers to improve productivity, quality, safety, and sustainability. From purpose built products to enterprise lifecycle solutions, Trimble software, hardware and services are transforming a broad range of industries such as agriculture, construction, geospatial and transportation and logistics. For more information about Trimble (NASDAQ: TRMB), visit www.trimble.com.