Senior Manager, DevSecOps

White Cap Management LLC; Atlanta (GA); On-site; USD 140,000 - 190,000; Full time

Job summary

White Cap Management LLC seeks a senior DevSecOps leader to design and drive enterprise security-integrated software delivery. You will partner with security, engineering, and product teams to implement robust SDLC controls, governance, and scalable CI/CD across the organization.

In this role, you will manage a multi-disciplinary team, set standards for code reviews and IaC, and lead initiatives to optimize release pipelines and AI/ML governance.

Qualifications

• Typically requires BS/BA in a related discipline.
• Generally 7+ years of experience in a related field.
• May require certification.
• Advanced degree may offset less experience in some disciplines.

Responsibilities

• Defines and executes the enterprise DevSecOps strategy, roadmap, operating model, governance, policies, standards, and reusable practices.
• Partners with Information Security to embed secure software development lifecycle controls including SAST/DAST, vulnerability remediation, and risk-based quality gates.
• Oversees enterprise CI/CD, source control, and Agile delivery platforms (GitHub Enterprise, GitHub Actions, Azure DevOps).
• Establishes enterprise standards for source control, branching, pull requests, code reviews, build automation, testing, deployment automation, and IaC.
• Governs secure delivery standards for AI/ML and generative AI solutions, including pipeline controls and model lifecycle management.
• Drives adoption of DevSecOps practices through training, coaching, and collaboration with developers and technology leaders.
• Establishes and monitors DevSecOps KPIs and engineering-effectiveness measures for leadership reporting.
• Leads, coaches, and develops assigned associates and supports performance and results.
• Performs other duties as assigned.

Skills

DevSecOps strategy

Governance & policy

Secure SDLC

Training & mentoring

Leadership & coaching

Education

BS/BA in related discipline

Advanced degree beneficial

Tools

GitHub Enterprise

GitHub Actions

Azure DevOps

Azure Pipelines

Bitbucket

Jira

SAST

DAST

IaC (Infrastructure as Code)

Job description

A position at White Cap isn't your ordinary job. You'll work in an exciting and diverse environment, meet interesting people, and have a variety of career opportunities.

The White Cap family is committed to Building Trust on Every Job. We do this by being deeply knowledgeable, fully capable, and always dependable, and our associates are the driving force behind this commitment.

Major Tasks, Responsibilities and Key Accountabilities

• Defines and executes the enterprise DevSecOps strategy, roadmap, operating model, governance, policies, standards, and reusable practices.
• Partners with Information Security to embed secure software development lifecycle controls, including secure coding, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), vulnerability remediation, and risk-based quality gates, across delivery workflows.
• Oversees enterprise CI/CD, source control, and Agile delivery platforms, including GitHub Enterprise, GitHub Actions, and Azure DevOps, and establishes reliable administration, access, pipeline, deployment, and release-management standards.
• Establishes enterprise standards for source control, branching, pull requests, code reviews, build automation, testing, deployment automation, release management, and infrastructure as code.
• Governs secure delivery standards for AI, machine learning, and generative AI solutions, including pipeline controls, prompt management, model lifecycle management, deployment, and AI security practices.
• Drives adoption of DevSecOps practices through practical training, coaching, transparent guidance, and close partnership with developers, architects, engineers, delivery teams, and technology leaders.
• Establishes and monitors DevSecOps KPIs and engineering-effectiveness measures and provides leadership with clear reporting on maturity, risk, performance, and continuous-improvement priorities.
• Leads, coaches, and develops assigned associates, participate in employment decisions, and supports performance, engagement, accountability, and business results.
• Performs other duties as assigned.

Nature and Scope

Solutions require analysis and investigation.

Achieves planned results by decisions and actions based on professional methods, business principles, and practical experience. May recommend/make decisions regarding new programs/initiatives that have significant impact to the business and carry consequences in unsuccessful endeavors.

Manages a larger team or multiple small teams through direction of subordinate management and/or supervisory staff.

Work Environment

Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.

Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.

Typically requires overnight travel less than 10% of the time.

Education and Experience

Typically requires BS/BA in a related discipline. Generally 7+ years of experience in a related field. May require certification. Advanced degree may offset less experience in some disciplines.

Preferred Qualifications

• 7+ years of progressive experience in software engineering, DevOps, DevSecOps, platform engineering, or related technology delivery, including experience leading teams.
• Prefer experience implementing an enterprise DevOps or DevSecOps transformation.
• Prefer hands-on knowledge of GitHub Enterprise, GitHub Actions, Azure DevOps, Azure Pipelines, Bitbucket, Jira, SAST, DAST, and infrastructure-as-code technologies.
• Prefer experience governing AI, machine learning, or generative AI delivery pipelines and model lifecycle controls.
• Prefer Certified Scrum Master (CSM) or an equivalent Agile certification.