Staff DevSecOps Engineer

FIA Tech; New York (NY); Presencial; USD 180.000 - 240.000; Jornada completa

Descripción de la vacante

FIA Tech is seeking a Staff DevSecOps Engineer to lead security and cloud platform initiatives for a high-scale, enterprise SaaS environment. You will define standards, frameworks, and long-term vision for secure software across the organization, partnering with the VP of TechOps and engineering leadership to embed security in every phase of development.

You will drive zero-trust architectures, compliance automation with OPA/Kyverno, and ongoing risk reduction across multi-cloud Kubernetes

Formación

• 8-10+ years of engineering experience designing and scaling DevSecOps strategies at an enterprise level.
• Mastery of large-scale distributed systems and multi-cloud or hybrid-cloud environments.
• Ability to influence engineering culture and translate security concepts to non-technical stakeholders.

Responsabilidades

• Provide a strong voice in security of a multi-region SaaS platform and zero-trust cloud architectures.
• Build a security platform that enables secure, compliant workloads for developers.
• Define and enforce enterprise compliance via Policy-as-Code tooling (OPA, Kyverno) across infra and Kubernetes.
• Champion a security-first culture and lead threat modelling and architectural reviews.
• Embed security across the SDLC including secure coding, app security testing, and software supply chain security.
• Advance vulnerability management and cloud security posture with automation and measurable outcomes.
• Evaluate foundational security tools and measure effectiveness with KPIs across global security posture.
• Lead security initiatives across multi-cloud/Kubernetes, shaping enterprise security roadmaps.
• Partner with compliance and legal to meet industry security standards and customer expectations.

Conocimientos

DevSecOps

Security leadership

Cloud security

Kubernetes

Threat modelling

Herramientas

Open Policy Agent (OPA)

Kyverno

HashiCorp Vault

AWS Secrets Manager

Kubernetes

Descripción del empleo

FIA Tech is the leading technology provider for exchange-traded derivatives, serving the global network of brokers, FCMs, buy-side firms, and market infrastructure providers. Through platforms such as Atlantis, Databank, Docs, and the Trade Data Network (TDN), FIA Tech streamlines post-trade operations, data workflows, and industry collaboration.

As the listed derivatives marketplace becomes increasingly interconnected, FIA Tech is expanding its ecosystem of partners to ensure our platforms, especially TDN, are embedded in the core systems and operational workflows used across the industry.

Role Overview

We are looking for a visionary Staff DevSecOps Engineer to serve as a core contributor to both our security platform as well as our cloud platform. Operating as a high-impact individual contributor, you will partner with the Technology Operations team to define the standards, frameworks, and long-term vision for secure software engineering across the entire enterprise. You will work with the VP of TechOps to help solve the most complex technical challenges at scale and drive organizational change.

Key Responsibilities

• Provide a strong voice in the security of an enterprise-wide, multi-region SaaS platform, IAM governance strategies, and zero-trust cloud architectures.
• Build a security platform that abstracts complex security operations, allowing developers to deploy secure, compliant workloads seamlessly.
• Define and enforce enterprise compliance frameworks utilizing Policy-as-Code tooling such as Open Policy Agent (OPA) or Kyverno across all infrastructure and Kubernetes environments.
• Champion a security-first culture across the broader organization, conduct architectural reviews and threat modelling exercises for mission-critical services.
• Partner with engineering leadership to define and embed security throughout the software development lifecycle, including secure coding practices, application security testing, software supply chain security, and developer enablement.
• Evolve and mature vulnerability management, cloud security posture management, and risk reduction programs, using automation and measurable outcomes to drive organizational security improvements.
• Evaluate, pilot, and negotiate foundational enterprise security tools, using industry-standard metrics and KPIs to measure the effectiveness of our global security posture.
• Lead strategic application & cloud security initiatives across multi-cloud and Kubernetes environments, shaping enterprise security architecture, identity governance, and long-term security roadmaps.
• Partner with compliance and legal to ensure accreditation across multiple industry security standards and customer security expectations.

Desired Attributes:

• Experience: 8-10+ years of engineering experience, with a proven track record of designing and scaling DevSecOps strategies at an enterprise level.
• Scale Expertise: Mastery of large-scale distributed systems, multi-cloud or hybrid-cloud environments, and complex enterprise Kubernetes topologies.
• Leadership & Influence: Demonstrated ability to influence engineering culture, align cross-functional teams, and translate complex technical security concepts to non-technical stakeholders.
• Deep Systems Knowledge: Advanced expertise in identity systems (OIDC, OAuth, Active Directory) and secrets management infrastructure (HashiCorp Vault, AWS Secrets Manager) at scale.
• Certifications (Preferred): Certified Kubernetes Security Specialist (CKS), CCSP, or advanced cloud provider architecture credentials.