Senior Product Security Architect — DevSecOps & Cloud

Itron, Inc.

Raleigh (NC)

On-site

USD 96,000 - 165,000

Full time

4 days ago

Be an early applicant

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Benefits offered by this job

401k matching

Hybrid work schedule

Employee stock purchase program

Job summary

Itron, Inc. is seeking a senior security leader to advance its product security program across software development, cloud, and engineering environments. You will secure source code, CI/CD pipelines, and product architectures while enabling agile development.

You will collaborate with Product Development, DevOps, Cloud Engineering, Enterprise Architecture, and Cybersecurity teams to design scalable security solutions that protect Itron products and services throughout the lifecycle.

Qualifications

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field.
7+ years of experience in cybersecurity, product security, application security, software engineering, DevSecOps, cloud security, or a related technical discipline.
5+ years of hands-on experience securing software development environments, source code platforms, CI/CD pipelines, or software supply chains.
Expert-level experience designing and operating security controls across cloud, SaaS, enterprise, and product engineering environments.
Strong knowledge of software supply chain security, source code protection, secrets management, privileged access management, artifact integrity, dependency governance, and secure release practices.
Deep understanding of application and API security principles, including OWASP Top 10, OWASP API Security Top 10, secure coding practices, and modern authentication and authorization models.
Experience troubleshooting complex issues involving source control systems, build platforms, deployment pipelines, artifact repositories, and release management processes.
Experience implementing path-to-production controls including policy enforcement, release gates, exception management, evidence collection, and deployment readiness criteria.
Demonstrated ability to communicate technical risk and recommendations effectively to engineering leadership and executive stakeholders.
Proven ability to influence diverse teams and drive adoption of secure, innovative, and agile engineering practices.
Strong written, verbal, and stakeholder-management skills.

Responsibilities

Lead the architecture and engineering of security controls for source code, development environments, build systems, software supply chains, and release processes.
Design and implement secure CI/CD patterns, artifact management controls, signing services, and deployment workflows.
Partner with security-by-design and testing teams to operationalize requirements, vulnerability management, threat modeling, and release controls.
Establish and promote secure application and API security standards, including authentication, authorization, and data protection.
Collaborate with engineering teams to reduce attack surfaces through secure architecture and least-privilege access.
Drive modernization of development environments to mitigate credential, dependency, and release risks.
Integrate security capabilities across source control, CI/CD, cloud services, and governance tools.
Automate security controls using APIs, IaC, and scripting (Python, PowerShell, Terraform, GitHub Actions, Azure DevOps, Jenkins, GitLab).
Establish logging, monitoring, and detection requirements for development and release environments with security operations teams.
Develop guardrails, standards, procedures, and documentation to support scalable product delivery.
Ensure auditable evidence for SBOMs, release approvals, and regulatory/customer assurance.
Mentor engineers to adopt secure, customer-focused engineering practices.