Senior DevSecOps Architect & Platform Lead

S&P Global Inc.; Princeton (NJ); On-site; USD 150,000 - 205,000; Full time

Benefits offered by this job

Health coverage

Retirement planning

Education program

Flexible PTO

Job summary

S&P Global Inc. is seeking a DevSecOps Architect to provide enterprise-level technical leadership for secure software delivery, cloud-native platforms, and developer enablement.

You will set strategy, reference architectures, and reusable platform capabilities across cloud, hybrid, and container environments, partnering with security, risk, and engineering leaders. You will embed automated security controls across the SDLC (SAST/DAST, SCA, secrets, container scanning, IaC policy).

Qualifications

• 7+ years in DevSecOps, cloud architecture, platform engineering, or cybersecurity engineering.
• Experience leading enterprise-scale DevSecOps transformation initiatives.
• Hands-on with CI/CD pipelines, Git-based source control, Terraform, Kubernetes, and policy enforcement.

Responsibilities

• Define enterprise DevSecOps architecture, roadmap, and adoption strategy with secure CI/CD patterns.
• Embed automated security controls across SDLC (SAST/DAST, SCA, secrets, container scanning, IaC policy).
• Govern architecture standards for source control, build automation, release orchestration, and observability.
• Lead architecture reviews, threat modeling, ADRs, and reference architectures.
• Improve platform reliability using DORA metrics and developer productivity benchmarks.
• Mentor architects and engineers to advance enterprise DevSecOps adoption.

Skills

DevSecOps leadership

Enterprise CI/CD

Cloud architecture

Threat modeling

ADR & governance

Platform engineering

Education

Bachelor’s degree or equivalent

Tools

Terraform

Kubernetes

OPA or Kyverno

SAST/DAST tooling

Job description

S&P Global Inc. is seeking a DevSecOps Architect to provide enterprise-level technical leadership for secure software delivery, cloud-native platforms, and developer enablement.

You will set strategy, reference architectures, and reusable platform capabilities across cloud, hybrid, and container environments, partnering with security, risk, and engineering leaders. You will embed automated security controls across the SDLC (SAST/DAST, SCA, secrets, container scanning, IaC policy).