Envista Holdings Corporation is a global leader in the dental industry, uniting more than 30 trusted brands under one mission. The DevSecOps Engineering Manager will lead a team responsible for building, securing, and operating cloud-native infrastructure and CI/CD platforms, ensuring the delivery of secure, scalable, and reliable applications.
Responsibilities:
- Lead, mentor, and develop a team of DevSecOps engineers, fostering a culture of ownership, collaboration, and continuous improvement
- Set clear goals, performance expectations, and career development plans for team members
- Manage resource allocation, workload distribution, and hiring to ensure the team can meet delivery and operational commitments
- Communicate priorities, risks, and capacity constraints to stakeholders to ensure alignment and realistic expectations
- Drive cross-functional collaboration with engineering, security, product, and operations teams
- Oversee the design, implementation, and optimization of cloud infrastructure (AWS, Azure, or GCP) with a focus on reliability, scalability, and cost efficiency
- Ensure operational excellence across cloud environments, including monitoring, incident response, and performance tuning
- Guide the adoption and maintenance of Infrastructure as Code (Terraform, CloudFormation, Pulumi)
- Lead the management of container orchestration platforms (Kubernetes, ECS, AKS, GKE) and ensure secure, efficient cluster operations
- Architect and maintain secure CI/CD pipelines with automated testing, scanning, and compliance checks
- Champion security-by-design principles throughout the SDLC, partnering closely with development teams
- Oversee implementation of secrets management, identity and access controls, and policy-as-code frameworks
- Drive automation initiatives to reduce manual work, improve reliability, and accelerate delivery
- Lead threat modeling, vulnerability management, and risk assessments across cloud and application environments
- Ensure adherence to compliance frameworks (SOC 2, ISO 27001, NIST, PCI, HIPAA depending on the organization)
- Oversee monitoring and response to security events using SIEM, CSPM, and cloud-native security tools
- Promote a culture of secure engineering practices across the organization
- Lead incident response efforts and participate in on-call rotations as needed
- Ensure robust observability through dashboards, alerts, and monitoring tools (Prometheus, Grafana, Datadog, CloudWatch)
- Drive root cause analysis and implement long-term improvements to prevent recurring issues
- Maintain documentation, runbooks, architectural diagrams, and operational standards
Requirements:
- Bachelor's degree in business, Computer Science, or a related field
- 10+ years of experience in DevSecOps, Cloud Engineering, or Site Reliability Engineering role
- Proven experience in a DevSecOps, Cloud Engineering, or Site Reliability Engineering role
- Prior experience managing or leading engineering teams
- Strong expertise with at least one major cloud provider (AWS, Azure, or GCP)
- Hands‑on experience with CI/CD pipelines and automation frameworks
- Solid understanding of Linux systems, networking, and troubleshooting
- Experience with containers and orchestration (Docker, Kubernetes)
- Familiarity with security tooling (SAST, DAST, SCA, SIEM, CSPM, IAM)
- Proficiency with scripting languages (Python, Bash, PowerShell)
- Experience with IaC tools (Terraform, CloudFormation, ARM, Pulumi)
- Certifications such as AWS Solutions Architect, Azure Administrator, Security+, CISSP, or Kubernetes CKA/CKS
- Experience with zero‑trust architectures and policy‑as‑code (OPA, Sentinel)
- Background in incident response or security operations
- Knowledge of microservices architecture and API security