Director, Secure DevOps

General information
Job Posting Title
Director, DevSecOps
Date
Tuesday, May 6, 2025
City
Princeton
State
NJ
Country
United States
Working time
Full-time
Description & Requirements
Maximus Digital Solutions is seeking a highly experienced and visionary DevSecOps Director to lead and scale our DevSecOps practice. This critical leadership role will be responsible for establishing and driving the strategy, implementation, and continuous improvement of our end-to-end software delivery pipeline, infrastructure automation, cloud operations, and site reliability engineering (SRE) principles. The DevSecOps Director will build and mentor a high-performing team of DevSecOps engineers and collaborate closely with engineering, product, and security teams to ensure the efficient, reliable, and secure delivery of our innovative products and services. You will champion the integration of security seamlessly throughout the entire software development lifecycle (SDLC), fostering a culture where security is a shared responsibility across development, operations, and security teams. Your expertise will drive the adoption of automation, tooling, and best practices to ensure the delivery of secure, reliable, and high-performing software products. This role requires a deep understanding of modern DevSecOps methodologies, cloud platforms, automation tools, and a proven track record of leading successful DevSecOps transformations in a dynamic and fast-paced environment.
This critical leadership role is based out of our Princeton, New Jersey, office location and is expected to be in the office 3 days per week to collaborate in-person with the team and other leaders.
Essential Duties and Responsibilities:
- Drive DevOps culture and develop best practices, standards, and desk-level procedures, and then educate and evangelize them across the Engineering organization; you are an information sharing leader.
- Simplify and standardize our CI/CD pipeline to allow us to continuously release new features while ensuring the stability of our existing systems.
- Continually evaluate new and emerging technologies to determine when they should be considered for integration into our environment; you are a thought leader.
- Provide security guidance and standards that pivot us to best-in-class in terms of security remediation and built-in security practices; you are obsessed with keeping us secure.
- Monitors team performance, provides timely and critical feedback on a regular cadence, establishes plans for improvement when necessary, and provides at least quarterly performance checkpoints with each direct report; you are invested in your people.
- Develop, maintain, and communicates DevSecOps related metrics to be shared organizationally and with senior leadership.
- Responsible for the team building, running, and supporting our DevOps CI/CD pipelined environment with an eye towards best-in class automation and security integration.
- Make key decisions on how to best evolve the platform technology, making smart decisions on where to pay down technical debt vs where to invest in new technology, always driving the platform technology forward towards cutting edge technology and capabilities.
Job-Specific Essential Duties and Responsibilities:
- Develop and articulate a clear and compelling DevSecOps strategy aligned with the company's overall technology and business objectives.
- Drive innovation and adoption of new tools and processes to continuously improve our DevSecOps capabilities.
- Build, mentor, and lead a high-performing team of DevSecOps engineers, effectively managing team workload, priorities, resource allocation, fostering a culture of collaboration, ownership, continuous learning with a focus on security.
- Define and track key performance indicators (KPIs) to measure the effectiveness and maturity of our DevSecOps practices.
- Collaborate effectively with engineering, product, and security teams to align DevSecOps strategies with their needs and priorities.
- Develop and implement strategies for infrastructure provisioning, configuration management, scaling, and cost optimization.
- Manage vendor relationships related to cloud services and DevSecOps tools.
- Ensure adherence to relevant security policies, standards (e.g., ISO 27001, SOC 2, HIPAA, FedRAMP), and regulatory requirements.
- Lead threat modeling exercises to proactively identify potential security risks and design effective mitigation strategies.
- Monitor the security and performance of applications and infrastructure, identifying areas for improvement and optimization.
- Champion and implement SRE principles and practices to ensure the availability, performance, and scalability of our cloud infrastructure and critical systems, while promoting a culture of blameless postmortems and continuous improvement of system reliability.
Minimum Requirements
- Bachelor's Degree
- 10+ years of experience
- 5+ years experience in site reliability an technical operations
- SAFe certification in appropriate area Solid technical background, with hands-on experience in automated, agile environments delivering infrastructure, monitoring, and tooling to software platforms
- Proven track record of leading diverse teams of technologists
- Extensive technology experience, with more recent demonstrable experience in DevOps practices
- Strong knowledge of Cloud technologies - AWS, Azure, etc.
- Strong understanding of Infrastructure as Code
- Strong understanding of CI/CD including systems and processes
- Strong understanding of security tooling, scanning, and audits
- Experience in short release cycles; proficient in SAFe Agile scrum operation environments
- Experience with data and metric driven approaches to decision making
- Demonstrable experience influencing and driving DevOps & Engineering strategy
- Experience with 24/7 site monitoring, ability to own uptime and performance SLA, work effectively in a matrixed environment with a wide range of stakeholders
- Possesses ability to work well across teams, to get things done without the need for continuous/regular intervention, able to exercise personal influence, resolve conflict, and bring about required behaviors
- High emotional intelligence and can interface and extend leadership cross-functionality
- Demonstrable ability to thrive in a fluid and collaborative environment
- Executive level communication skills; including presenting, collaborating, and partnering with stakeholders across all levels of the organization
Job-Specific Minimum Requirements:
- Additional years of relevant experience will be considered in lieu of degree. Master's degree preferred.
- Minimum of 10 years of progressive experience in DevSecOps, infrastructure automation, cloud operations, or site reliability engineering.
- Minimum of 5 years of experience in a leadership role managing and mentoring DevSecOps teams.
- Deep understanding of modern DevSecOps methodologies, principles, and best practices.
- Extensive experience with cloud platforms (e.g., AWS, Azure, GCP) and their services.
- Proven experience with Infrastructure-as-Code (IaC) tools (e.g., Terraform, CloudFormation).
- Strong proficiency in scripting languages (e.g., Python, Bash).
- Experience with CI/CD tools and pipelines (e.g., Jenkins, GitLab CI, CircleCI, Azure DevSecOps).
- Experience with configuration management tools (e.g., Ansible, Chef, Puppet).
- Strong understanding of containerization technologies (e.g., Docker, Kubernetes) and orchestration.
- Experience with monitoring and logging tools (e.g., Prometheus, Grafana, ELK stack, Splunk).
- Familiarity with SRE principles and practices, including SLOs, SLIs, and error budgets.
- Ability to work effectively in a fast-paced and dynamic environment.
- Experience with compliance standards e.g.HIPAA, FedRAMP.
- Excellent problem-solving, analytical, and troubleshooting skills.
- Strong communication, interpersonal, and presentation skills.
Preferred Skills and Qualifications:
- Relevant cloud provider certifications (e.g., AWS Certified DevSecOps Engineer, Azure DevSecOps Engineer Expert, Google Cloud DevSecOps Engineer).
- Relevant IT security certifications (e.g. CISSP).
- Experience with microservices architecture and distributed systems.
- Experience managing and rolling out containerized application workloads
- Experience with database administration and automation.
- Experience with performance testing and optimization.
- Experience with cost management and optimization in cloud environments.
EEO Statement
Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information and other legally protected characteristics.
Pay Transparency
Maximus compensation is based on various factors including but not limited to job location, a candidate's education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Annual salary is just one component of Maximus's total compensation package . click apply for full job details