DevOps Director - Gruve

OpenTalent; United States; On-site; USD 150,000 - 190,000; Full time

Job summary

Gruve seeks a senior Platform Engineering leader to own the identity platform across client estates and Gruve-hosted environments. You will manage IaC, CI/CD for identity artifacts, and secure operations of IAM platforms with a focus on audit readiness and compliance.

You will lead a DevOps team across US and Pune, driving platform standards, architectural decisions, and upgrades while ensuring high availability and secure delivery pipelines for identity workloads.

Qualifications

• Experience building and governing CI/CD for identity artifacts in a security-conscious environment.
• Strong IaC background with Terraform/Ansible and containerized deployments on Kubernetes.
• Leadership of DevOps/platform teams across multiple locations.
• Deep knowledge of identity, access management, and audit requirements.

Responsibilities

• Own environment strategy across development, test, UAT and production estates for IGA platforms.
• Build and govern CI/CD for identity artifacts with automated deployment and drift detection.
• Own infrastructure-as-code for identity platform infrastructure and containerized deployment on Kubernetes.
• Manage secrets, workload identities, service accounts, and PKI lifecycles.
• Design platform reliability, including HA/DR, RPO/RTO, and capacity planning.
• Secure the delivery chain with SAST/DAST, SBOM, signing, and least-privilege access.
• Stand up observability for identity platforms and route audit logs to SIEM.
• Lead DevOps and platform engineering across US and Pune; set standards and audit evidence.
• Collaborate with Principal Engineering Manager on architecture and presales support.
• Own upgrade and patch strategy across client estates with vendor coordination.

Skills

CI/CD pipelines

Terraform

Kubernetes

Identity platforms

Platform leadership

SAST/DAST

PKI lifecycle

Audit/compliance

Data masking

Cloud infrastructure

Tools

Vault

SailPoint

Saviynt

Okta

Terraform

Job description

Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.

About the Role

Owns the engineering platform beneath every IGA/IAM engagement: environments, pipelines, infrastructure-as-code, and the secure operation of identity platforms in client and Gruve-hosted estates. Also owns the identity of the delivery chain itself — the service accounts, workload identities, secrets and certificates that identity platforms run on and that auditors ask about first.

Key Responsibilities

• Own environment strategy across the portfolio: development, test, UAT and production estates for IGA platforms, including refresh cadence, data masking and anonymization of production identity data in lower environments.
• Build and govern CI/CD for identity artifacts — configuration-as-code promotion, object versioning and packaging for SailPoint, Saviynt, and Okta, automated deployment, drift detection and rollback.
• Own infrastructure-as-code (Terraform, Ansible) for identity platform infrastructure and containerized deployment on Kubernetes (EKS/AKS/GKE).
• Own secrets and non-human identity management across the practice: vaulting, workload identity federation, service-account and API-key lifecycle, and certificate and PKI lifecycle for connector and federation endpoints.
• Design and validate platform reliability for identity workloads: HA and DR architecture, RPO/RTO validation, and capacity and performance tuning for aggregation cycles, certification campaigns and peak provisioning load.
• Secure the delivery chain: SAST/DAST and dependency scanning in the pipeline, SBOM generation, artifact signing, and least-privilege pipeline and repository access.
• Stand up observability for identity platforms — provisioning failure rates, aggregation SLA, connector health, task and workflow queue depth — and route identity audit logs into the client SIEM.
• Lead the DevOps and platform engineering team across US and Pune; set engineering standards, chair change advisory for platform changes, and own audit evidence for client and internal audit.
• Partner with the Principal Engineering Manager on architecture decisions with platform impact, and support presales for hosting, managed-service and platform-modernization scope.
• Own platform upgrade and patch strategy across client estates, including vendor release tracking, regression risk assessment and coordinated upgrade windows.