Staff DevSecOps Engineer

FIA TECHNOLOGY SERVICES, LLC; New York (NY); Sur place; USD 140 000 - 190 000; Plein temps

Résumé du poste

FIA Technology Services, LLC seeks a Staff DevSecOps Engineer in New York to shape secure software engineering across the enterprise. You will drive security standards, partner with TechOps, and lead security architecture for multi-cloud Kubernetes environments.

Responsibilities include threat modelling, policy-as-code, and implementing scalable security controls while collaborating with compliance and legal teams to meet industry standards.

Qualifications

• 8-10+ years of engineering experience, designing and scaling DevSecOps at an enterprise level.
• Experience with large-scale distributed systems, multi-cloud or hybrid-cloud environments.
• Ability to translate complex security concepts to non-technical stakeholders.
• Expertise in identity systems (OIDC, OAuth, AD) and secrets management at scale.

Responsabilités

• Provide security for an enterprise SaaS platform with multi-region deployments.
• Build a security platform to enable secure, compliant workloads for developers.
• Define and enforce enterprise policies using OPA/Kyverno across infra and Kubernetes.
• Lead security reviews, threat modelling, and architecture governance.

Connaissances

DevSecOps

Cloud security

Kubernetes

Security architecture

Policy-as-Code

Threat modelling

Outils

Open Policy Agent

Kyverno

HashiCorp Vault

AWS

Azure

GCP

Description du poste

Staff DevSecOps Engineer

FIA TECHNOLOGY SERVICES, LLC New York, New York, United States

About this position

About FIA Tech

FIA Tech is the leading technology provider for exchange-traded derivatives, serving the global network of brokers, FCMs, buy-side firms, and market infrastructure providers. Through platforms such as Atlantis, Databank, Docs, and the Trade Data Network (TDN), FIA Tech streamlines post-trade operations, data workflows, and industry collaboration.

As the listed derivatives marketplace becomes increasingly interconnected, FIA Tech is expanding its ecosystem of partners to ensure our platforms, especially TDN, are embedded in the core systems and operational workflows used across the industry.

Role Overview

We are looking for a visionary Staff DevSecOps Engineer to serve as a core contributor to both our security platform as well as our cloud platform. Operating as a high-impact individual contributor, you will partner with the Technology Operations team to define the standards, frameworks, and long-term vision for secure software engineering across the entire enterprise. You will work with the VP of TechOps to help solve the most complex technical challenges at scale and drive organizational change.

Key Responsibilities

• Provide a strong voice in the security of an enterprise-wide, multi-region SaaS platform, IAM governance strategies, and zero-trust cloud architectures.
• Build a security platform that abstracts complex security operations, allowing developers to deploy secure, compliant workloads seamlessly.
• Define and enforce enterprise compliance frameworks utilizing Policy-as-Code tooling such as Open Policy Agent (OPA) or Kyverno across all infrastructure and Kubernetes environments.
• Champion a security-first culture across the broader organization, conduct architectural reviews and threat modelling exercises for mission-critical services.
• Partner with engineering leadership to define and embed security throughout the software development lifecycle, including secure coding practices, application security testing, software supply chain security, and developer enablement.
• Evolve and mature vulnerability management, cloud security posture management, and risk reduction programs, using automation and measurable outcomes to drive organizational security improvements.
• Evaluate, pilot, and negotiate foundational enterprise security tools, using industry-standard metrics and KPIs to measure the effectiveness of our global security posture.
• Lead strategic application & cloud security initiatives across multi-cloud and Kubernetes environments, shaping enterprise security architecture, identity governance, and long-term security roadmaps.
• Partner with compliance and legal to ensure accreditation across multiple industry security standards and customer security expectations.

Desired Attributes:

• Experience: 8-10+ years of engineering experience, with a proven track record of designing and scaling DevSecOps strategies at an enterprise level.
• Scale Expertise: Mastery of large-scale distributed systems, multi-cloud or hybrid-cloud environments, and complex enterprise Kubernetes topologies.
• Leadership & Influence: Demonstrated ability to influence engineering culture, align cross-functional teams, and translate complex technical security concepts to non-technical stakeholders.
• Deep Systems Knowledge: Advanced expertise in identity systems (OIDC, OAuth, Active Directory) and secrets management infrastructure (HashiCorp Vault, AWS Secrets Manager) at scale.
• Certifications (Preferred): Certified Kubernetes Security Specialist (CKS), CCSP, or advanced cloud provider architecture credentials.