Sr Advanced Software Engr

Key Responsibilities

• Design and implement end-to-end DevSecOps pipelines that embed shift-left security practices (SAST, DAST, SCA, IAST) into CI/CD workflows.
• Define and enforce Policy-as-Code and security guardrails across cloud infrastructure using tools like OPA, or Azure Policy.
• Architect Infrastructure as Code (IaC) frameworks (Terraform, Ansible, Bicep) to provision and govern cloud environments securely.
• Build and maintain secure software supply chain practices including SBOM management, artifact signing, and dependency scanning.
• Conduct DevSecOps maturity assessments and develop organizational roadmaps for security automation adoption.
• Establish and enforce Zero Trust Architecture principles across network, identity, and workload layers.
• Integrate secrets management, certificate lifecycle management, and vault solutions (e.g., HashiCorp Vault, Azure Key Vault).
• Collaborate with AppSec and compliance teams to meet standards such as ISO 27001, NIST 800-53, SOC 2, and CIS Benchmarks.
• Define and own the organization's SRE strategy, roadmap, and operating model, including SLI/SLO/SLA frameworks and error budget policies.
• Design and implement observability architectures using APM tools, distributed tracing, log aggregation, and real-time alerting (e.g., Prometheus, Grafana, Datadog, Azure Monitor).
• Lead incident management, RCA/post-mortem processes, and drive systemic improvements to reduce MTTR and recurrence.
• Champion chaos engineering and resilience testing practices to proactively identify failure modes before they impact production.
• Establish toil reduction programs through automation, enabling SRE teams to focus on reliability engineering over manual operations.
• Design high-availability, fault-tolerant architectures for distributed systems and microservices on cloud platforms.
• Drive capacity planning, performance engineering, and scalability reviews across critical services.
• Build Internal Developer Platforms (IDPs) and self-service tooling to accelerate developer productivity while maintaining security and compliance guardrails.