Senior Product Security Architect — DevSecOps & Cloud

Itron, Inc.; Raleigh (NC); On-site; USD 96,000 - 165,000; Full time

Benefits offered by this job

401k matching

Hybrid work schedule

Employee stock purchase program

Job summary

Itron, Inc. is seeking a senior security leader to advance its product security program across software development, cloud, and engineering environments. You will secure source code, CI/CD pipelines, and product architectures while enabling agile development.

You will collaborate with Product Development, DevOps, Cloud Engineering, Enterprise Architecture, and Cybersecurity teams to design scalable security solutions that protect Itron products and services throughout the lifecycle.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• 7+ years of experience in cybersecurity, product security, application security, software engineering, DevSecOps, cloud security, or a related technical discipline.
• 5+ years of hands-on experience securing software development environments, source code platforms, CI/CD pipelines, or software supply chains.
• Expert-level experience designing and operating security controls across cloud, SaaS, enterprise, and product engineering environments.
• Strong knowledge of software supply chain security, source code protection, secrets management, privileged access management, artifact integrity, dependency governance, and secure release practices.
• Deep understanding of application and API security principles, including OWASP Top 10, OWASP API Security Top 10, secure coding practices, and modern authentication and authorization models.
• Experience troubleshooting complex issues involving source control systems, build platforms, deployment pipelines, artifact repositories, and release management processes.
• Experience implementing path-to-production controls including policy enforcement, release gates, exception management, evidence collection, and deployment readiness criteria.
• Demonstrated ability to communicate technical risk and recommendations effectively to engineering leadership and executive stakeholders.
• Proven ability to influence diverse teams and drive adoption of secure, innovative, and agile engineering practices.
• Strong written, verbal, and stakeholder-management skills.

Responsibilities

• Lead the architecture and engineering of security controls for source code, development environments, build systems, software supply chains, and release processes.
• Design and implement secure CI/CD patterns, artifact management controls, signing services, and deployment workflows.
• Partner with security-by-design and testing teams to operationalize requirements, vulnerability management, threat modeling, and release controls.
• Establish and promote secure application and API security standards, including authentication, authorization, and data protection.
• Collaborate with engineering teams to reduce attack surfaces through secure architecture and least-privilege access.
• Drive modernization of development environments to mitigate credential, dependency, and release risks.
• Integrate security capabilities across source control, CI/CD, cloud services, and governance tools.
• Automate security controls using APIs, IaC, and scripting (Python, PowerShell, Terraform, GitHub Actions, Azure DevOps, Jenkins, GitLab).
• Establish logging, monitoring, and detection requirements for development and release environments with security operations teams.
• Develop guardrails, standards, procedures, and documentation to support scalable product delivery.
• Ensure auditable evidence for SBOMs, release approvals, and regulatory/customer assurance.
• Mentor engineers to adopt secure, customer-focused engineering practices.

Skills

Cybersecurity

Product security

Application security

DevSecOps

Cloud security

Source code security

CI/CD pipelines

Software supply chain

Threat modeling

OWASP

Communication

Leadership

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

GitHub

GitLab

Azure DevOps

Jenkins

Bitbucket

Job description

Itron, Inc. is seeking a senior security leader to advance its product security program across software development, cloud, and engineering environments. You will secure source code, CI/CD pipelines, and product architectures while enabling agile development.

You will collaborate with Product Development, DevOps, Cloud Engineering, Enterprise Architecture, and Cybersecurity teams to design scalable security solutions that protect Itron products and services throughout the lifecycle.