Senior Director of DevSecOps - Remote

Overview

CIS seeks an experienced DevSecOps leader who can execute effective communications, strategic planning, technical expertise, and management skills. The leader will be responsible for managing DevSecOps for the Engineering Center of Excellence (ECoE). This role requires a combination of both hands-on work and implementation of strategic objectives around DevSecOps, technical thought leadership, and subject matter expertise for our ecosystem of applications and platforms. Responsibilities will also include designing, implementing, and maintaining our cloud infrastructure and services, and helping to automate and streamline our development and deployment processes. They will work closely with engineering, infrastructure, operations, and security teams to ensure that the DevSecOps processes and tools are aligned with the organization's goals and objectives. Key responsibilities include designing and implementing scalable and sustainable continuous integration and continuous delivery (CI/CD) pipelines, automating delivery processes, and providing guidance on performance and operability improvements. 

 

The Center for Internet Security (CIS) makes the connected world a safer place for people, businesses, and governments through our core competencies of collaboration and innovation. We are a community-driven nonprofit responsible for industry-leading best practices for securing IT systems and data. CIS is also a trusted resource for cyber threat prevention, protection, response, and recovery for U.S. State, Local, Tribal, and Territorial (SLTT) government entities and election offices.

 

CIS has an award-winning reputation for investing in its people (click here to learn more), as well as continuous learning and development. We offer our employees diverse opportunities to expand their impact personally and professionally, in their local communities, and among one another. Core Leadership Principles drive our employees at every level of the organization, empowering them to be leaders in everything they do.

 

Salary Range: $150,800 - $271,400  We offer a competitive total rewards package at the Center for Internet Security:

• Base salary is determined on a number of factors including, but not limited to, education, experience and skills
• Health (PPO, EPO, HSA), Dental & Vision Insurance eligibility starting from the first day of hire
• $500 wellness card for Health Coverage Participants
• 401(k) with 4% Company Match, vested from the first day of hire
• Flexible Spending Account (FSA) & Dependent Care Account (DCA)
• Life Insurance
• Bonding Leave
• Paid Volunteering Program
• Bonus eligibility
• Paid Time Off (PTO) inclusive of vacation, personal and sick time
• Paid Holidays
• Wellness Program
• Employee Engagement Activities
• Professional Development Opportunities
• Tuition Reimbursement
• Student Loan PayDown Program
• Employee Referral program
• Employee Assistance Program

What You'll Do

• Lead teams in adopting modern design patterns, cloud-first approaches, security-first, and innovative integrations with partner systems
• Develop deployment standards, reusable interfaces, and orchestration workflows to streamline processes and integrate cloud services effectively
• Provide technical guidance on cloud best practices, cost optimization, and security throughout the organization
• Create comprehensive documentation for automation processes, workflows, and standard operating procedures for educating team members on automation best practices
• Build and maintain CI/CD building blocks and shared libraries proactively for app and development teams to enable quicker build and deployment
• Create plug-and-play/reusable solutions and patterns for CI/CD pipelines
• Create, develop, and implement automation and system integration for various build platforms
• Create, develop, and implement solutions to address infrastructure and security requirements
• Write scripts and code (e.g. Python, PowerShell, Bash, etc.) to automate repetitive tasks, integrate cloud services, and enhance cloud automation capabilities
• Design and implement CI/CD pipelines and cloud infrastructure automation, ensuring high availability, reliability, scalability, and performance
• Design action plans to address CI/CD platform, tools, and solutions’ shortcomings and difficulties
• Integrate security controls and best practices into the automation process to ensure a secure cloud environment
• Ensure incident tracking tools are updated in accordance with established norms and processes, gather all essential data and document any discoveries and concerns
• Identify technical concerns and problems, assess them, and offer prompt solutions