Lead DevSecOps Engineer

ComPsych is the worldwide leader in organizational mental health and well-being. They are seeking a Lead DevSecOps Engineer to serve as a hands-on technical leader who embeds security into every stage of the software delivery lifecycle across a multi-cloud environment, while mentoring a team of engineers and establishing best practices.

Responsibilities:

• Serve as a technical subject matter expert and mentor DevSecOps engineers, providing guidance on industry best practices, secure design standards, and technical growth opportunities
• Define, document, and evangelize DevSecOps standards, reference architectures, and engineering guardrails across teams
• Design, build, and maintain secure CI/CD pipelines with automated security gates (SAST, DAST, SCA, secrets scanning, and container/image scanning)
• Architect and manage multi-cloud infrastructure across AWS, Azure, and other providers, ensuring consistency, resilience, security, and cost-effectiveness
• Develop and maintain Infrastructure-as-Code using open-source, commercial, and/or cloud-native frameworks, along with configuration management tools such as Ansible
• Embed security controls and policy-as-code into deployment workflows and enforce compliance guardrails
• Evaluate and integrate AI tooling into DevSecOps CI/CD pipelines where appropriate to improve automation, security coverage, and engineering efficiency, establishing responsible-use guidelines for the team
• Manage vulnerability management and support incident response for cloud and pipeline infrastructure, conducting root cause analysis for effective resolution
• Deploy monitoring, logging, and alerting to proactively detect issues, resolve bottlenecks, and optimize resource utilization across environments
• Manage secrets, identity, and access (IAM, RBAC, Key Vault, Secrets Manager, and secrets-management platforms)
• Evaluate container and orchestration technologies (e.g., Docker, Kubernetes), establish standards and best practices, and ensure their secure rollout and ongoing operational support
• Enhance cloud performance, availability, security, and cost-effectiveness by implementing best practices and standards
• Stay current on the latest multi-cloud and DevSecOps trends and technologies, evaluating and recommending new tools and services
• Partner closely with Security Engineering teams—specifically Application Security (AppSec) and Infrastructure Security (InfraSec)—to operationalize their findings and controls within CI/CD pipelines and cloud infrastructure
• Collaborate with internal teams to align and integrate secure cloud solutions with application development efforts
• Participation in an on-call rotation
• Other tasks as required

Requirements:

• Bachelor's degree in Information Technology, Computer Science, or another relevant field required
• 8+ years of relevant DevOps, security, or cloud engineering experience, with a demonstrable focus on DevSecOps (10+ years preferred for Distinguished level)
• Demonstrated leadership experience mentoring or leading engineers and setting technical standards
• Relevant industry certifications in either AWS or Azure (e.g., AWS Certified Solutions Architect / Security – Specialty, Azure Solutions Architect Expert, Azure DevOps Engineer Expert, or comparable cloud certifications)
• Deep hands-on expertise across at least two major clouds, including AWS and Azure
• Strong proficiency with Infrastructure-as-Code (cloud-native and open-source frameworks) and configuration management tools such as Ansible
• Proven track record building secure CI/CD pipelines (e.g., GitHub Actions, GitLab CI, Azure DevOps, Jenkins)
• Strong scripting and automation skills (PowerShell, Shell, Python, or similar)
• Solid grasp of cloud security frameworks, network security, segmentation strategies, and identity management
• Experience applying security and compliance frameworks and benchmarks, such as CIS Benchmarks, NIST, and HIPAA
• Familiarity with microservices, serverless, and container orchestration (e.g., Kubernetes)
• Familiarity with cloud governance, cost management, and optimization techniques
• Experience integrating or evaluating AI/ML developer and security tooling
• Self-starter with the ability to multi-task and work autonomously
• Excellent organizational and project management skills
• Effective interpersonal and communication skills
• Consistent and reliable high-speed internet and workspace free from distraction, disruption, or noise is required
• Ability to be present on camera during work-related trainings, meetings, and/or events
• Must be able to sit or stand at a desk for prolonged periods while working on a computer