Senior Product Security Architect: Secure DevOps & Cloud

Itron, Inc.

Chicago (IL)

Hybrid

USD 96,000 - 165,000

Full time

4 days ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Competitive benefits

Hybrid work schedule

401k matching

Employee stock purchase program

Job summary

Itron, Inc. is seeking a senior security leader to advance product security across software development, cloud, and engineering environments. You will secure source code, CI/CD pipelines, and software supply chains while enabling agile development.

You will collaborate with Product Development, DevOps, Cloud Engineering, and Cybersecurity teams to design scalable security solutions, drive secure practices, and protect product delivery across the lifecycle.

Qualifications

7+ years in cybersecurity, product security, or related technical discipline.
5+ years securing software development environments and CI/CD.
Expert level in security controls across cloud, SaaS, and product engineering.
Strong knowledge of software supply chain security and secrets management.
Deep understanding of API security and modern authentication models.
Experience with source control, build platforms, and release management.
Ability to communicate risk to engineering leadership.
Proven ability to influence cross-functional teams.

Responsibilities

Lead architecture and engineering of security controls across code repos and release processes.
Design secure CI/CD patterns, artifact controls, signing services, and deployment workflows.
Partner with security testing to operationalize requirements and threat modeling.
Establish secure application and API security standards.
Collaborate to reduce attack surfaces via secure architecture and least-privilege access.
Modernize development environments to mitigate credential and supply chain risks.
Automate security controls using APIs, IaC, and scripting (Python, PowerShell, Terraform, GitHub Actions, Azure DevOps, Jenkins, GitLab).
Establish logging, monitoring, and detection requirements with security ops.
Develop guardrails, procedures and documentation for scalable product delivery.
Ensure auditable evidence for SBOM, release approvals and assurance requirements.
Mentor engineers and promote secure, customer-focused practices.