Role and Responsibilities
Lead DevSecOps teams to achieve more frequent (release on demand), secure, quality code deployments, faster lead time from commit to deploy, faster MTTR, lower change failure rates, and team satisfaction.
• Lead migration of current tool chains to Central Portfolio DevSecOps Architectural Tool Chain
• Revenue generation from internal/external customer by offering DevSecOps as Service
• Achieving a DORA metrics of High and beyond (Elite) at the portfolio level
• Implementation of best in industry practices in DevSecOps
• Employ value-stream mapping to visualize flow, determine metrics and current state of value-added tasks and
waste to guide improvements
• Use metrics and future state value stream mapping to identify improvement opportunities in People, Process and Tools.
• Design the organization aligned with the vision and improve communication between cross-functional teams using concepts from Target Operating Models, Conway’s Law, SAFe.
• Passionately champion a vision with support from top management. Relentlessly promote changes across the organization incrementally to effect changes.
• Evangelize measurable business outcomes gained with the improved value stream while honestly contrasting prior performance.
• Project a vision, provide intellectual stimulation, inspire collaborative communication, support specific behaviors and pro-actively recognize personal behaviors.
Capabilities
• Should have strong understanding of software development and IT operations, familiarity with programming languages (e.g., Python, Java, Go), knowledge of CI/CD tools (e.g., Jenkins, GitLab CI), experience with cloud platforms (e.g., AWS, Azure, Google Cloud) and proficiency in containerization and orchestration tools (e.g., Docker, Kubernetes).
• Should have ability to automate processes and workflows to improve efficiency and experience with Infrastructure as Code (IaaC) tools (e.g., Terraform, Ansible).
• Should have strong analytical skills to troubleshoot and resolve issues quickly and ability to think critically and make decisions under pressure.
• Should be able to define Tactics, techniques and procedures (TTPs) describe how threat agents orchestrate and manage attacks. Continuous Delivery practices to realize continuous governance, risk management and compliance.
• Should be able to ensure Security is made continuously adaptive and auditable by breaking security silos. Security specific practices and integrated toolsets as code (such as security scans) enable automated security KPIs and observable security practices into the DevOps value stream.
• Ensure Security is built into the value stream efficiently with empowered development teams implementing features securely, shift-left security testing, tools for automated feedback.
• Ensure Security is integrated into people, process, technology and governance practices.
• Ensure Value Stream Mapping establishes where security activities and bottlenecks currently happen.