# DevSecOps Architect

**Company**: S&P Global
**Location**: Princeton, NJ
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $174,000 to $200,000
**Category**: Engineering
**Industry**: Technology

**Apply**: https://spgi.wd5.myworkdayjobs.com/en-US/SPGI_Careers/job/Princeton-NJ/Director--Open-Source-Software-Manager_331956-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_650e085c-d14

## Description

Our Corporate Technology team serves as the centralized platform engineering function, establishing enterprise-wide DevSecOps standards and architectural patterns that enable secure, scalable software delivery across all business units.

**Key Responsibilities**

- Define and evolve enterprise DevSecOps architecture standards, reference patterns, and security-by-design practices that strengthen software delivery across global teams

- Design and implement secure CI/CD pipelines, container orchestration platforms, and artifact management governance models that support enterprise scale, resilience, and regulatory compliance

- Lead cross-functional collaboration with engineering, platform, infrastructure, and security stakeholders to align architecture decisions with business priorities and risk management objectives

- Assess emerging open-source technologies and guide strategic platform modernization initiatives that enhance developer productivity and operational excellence

- Develop comprehensive architectural documentation, standards, and roadmaps that enable consistent implementation and knowledge sharing across distributed teams

- Mentor technical teams on security-by-design principles, modern software supply chain practices, and platform engineering best practices

**Required Qualifications**

- 12+ years of progressive experience in DevOps, DevSecOps, platform engineering, security engineering, or solution architecture roles with demonstrated leadership impact

- Proven experience designing and implementing secure platform architectures for CI/CD systems, container orchestration platforms, and enterprise software delivery environments

- Strong expertise with artifact management solutions, version control platforms, and infrastructure automation technologies

- Exceptional communication and stakeholder management skills with the ability to influence technical direction and drive alignment across global, cross-functional teams

- Experience embedding security-by-design principles across application delivery, containerization, and software supply chain practices

- Bachelor's degree in Computer Science, Information Security, Engineering, or related discipline, or equivalent practical experience demonstrating technical leadership capabilities

**Preferred Qualifications**

- Experience with policy-as-code frameworks, secrets management platforms, and infrastructure as code tools

- Deep knowledge of software bill of materials, vulnerability scanning solutions, zero trust security principles, and regulatory compliance frameworks

- Relevant industry certifications such as Certified Kubernetes Administrator, Certified Kubernetes Security Specialist, CISSP, Security+, cloud security certifications, or enterprise architecture credentials

- Experience leading platform engineering initiatives and modernization programs in global, distributed technology organizations

**Compensation/Benefits Information** The anticipated base salary range for this position is $174,000 to $200,000. The final base salary for this role will be based on the individual's geographic location, experience level, skill set, training, licenses, and certifications. This role is eligible for an annual incentive plan and additional S&P Global benefits, including health care coverage, flexible downtime, continuous learning, and retirement planning.

## Skills

### Required
- DevOps
- DevSecOps
- platform engineering
- security engineering
- solution architecture
- CI/CD
- container orchestration
- artifact management
- infrastructure automation

### Nice to have
- policy-as-code frameworks
- secrets management platforms
- infrastructure as code tools
- software bill of materials
- vulnerability scanning solutions
- zero trust security principles
- regulatory compliance frameworks

---

Source: [Apply at spgi.wd5.myworkdayjobs.com](https://spgi.wd5.myworkdayjobs.com/en-US/SPGI_Careers/job/Princeton-NJ/Director--Open-Source-Software-Manager_331956-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)