Associate Director, DevSecOps Architect

About the Role

Grade Level (for internal use): 12

The Team

Our Corporate Technology team serves as the centralized platform engineering function, establishing enterprise-wide DevSecOps standards and architectural patterns that enable secure, scalable software delivery across all business units. We are the strategic technology backbone that empowers global development teams through standardized platforms, governance frameworks, and innovative open-source solutions. The team values technical excellence, cross-functional collaboration, and driving organizational impact through thoughtful architecture decisions that balance security, compliance, and developer productivity.

The Role

The DevSecOps Architect provides enterprise-level technical leadership for secure software delivery, cloud-native platforms, and developer enablement. This role defines DevSecOps strategy, reference architectures, engineering standards, and reusable platform capabilities that integrate security throughout the software development lifecycle. The architect partners with engineering, cybersecurity, infrastructure, risk, and business leaders to improve delivery speed, resilience, compliance, and developer experience.

Key Responsibilities

• Define and lead the enterprise DevSecOps architecture, roadmap, and adoption strategy - designing secure, scalable CI/CD patterns and paved-road developer capabilities across cloud, hybrid, container, and orchestration environments, with governance models that drive consistent adoption across engineering value streams.
• Embed automated security controls across the full software development lifecycle - including static and dynamic code analysis (SAST/DAST), software composition analysis (SCA), secrets detection, artifact integrity verification, container scanning, infrastructure-as-code policy scanning, and runtime protection - translating cybersecurity and compliance control requirements into automated, auditable guardrails.
• Establish and govern architecture standards for source control, build automation, artifact management, release orchestration, observability, vulnerability management, and software supply-chain security - providing authoritative technical direction across developer tooling platforms and self-service capabilities.
• Lead architecture reviews, threat modeling sessions, design decisions, and proofs of concept - authoring reference architectures, engineering standards, architecture decision records (ADRs), and roadmaps that enable engineering and senior leadership to make defensible, evidence-based platform decisions.
• Drive platform reliability, resilience, and operational readiness through measurable engineering practices - defining and monitoring DORA metrics including deployment frequency, lead time, change failure rate, mean time to recovery, security findings density, and developer productivity benchmarks.
• Mentor architects and engineers and build communities of practice that accelerate enterprise-wide DevSecOps adoption - influencing senior stakeholders without direct authority and advancing developer experience so that secure delivery is the default, not an additional step.

Required Qualifications

• Experience: 7+ years of experience in DevSecOps, cloud architecture, platform engineering, or cybersecurity engineering - including demonstrated leadership of enterprise-scale DevSecOps transformation initiatives or large-scale platform architecture programs
• CI/CD & Platform Engineering: Hands-on production experience designing and operating enterprise CI/CD pipelines using Git-based source control platforms, artifact management repositories, container orchestration technologies such as Kubernetes, and infrastructure-as-code tooling such as Terraform - with version control discipline and automated policy validation at scale
• Security Engineering across the SDLC: Demonstrated production experience embedding automated security controls across the software development lifecycle - including SAST/DAST code analysis, software composition analysis (SCA), secrets detection, container image scanning, and policy-as-code enforcement technologies such as OPA or Kyverno
• Cloud Platform: Hands-on production experience with at least one major cloud platform (AWS, Azure, or GCP) - including cloud-native IAM, secrets management platforms such as HashiCorp Vault or AWS Secrets Manager, network security, and vulnerability management in regulated or enterprise-scale environments
• Bachelor's degree in computer science, engineering, cybersecurity, information systems, or equivalent practical experience.

Preferred Qualifications

• Experience working in a regulated or security-sensitive enterprise environment, such as financial services or fintech
• Experience with managed container orchestration services such as Amazon EKS in production enterprise environments
• Experience with zero-trust architecture principles, SRE practices, and developer self-service platform design
• Relevant certifications in cloud security, container orchestration, DevOps, or cybersecurity (e.g., AWS Security Specialty, CKS, CISSP, or equivalent)
• Experience with software supply-chain security practices and observability or SIEM platform integration
• Experience evaluating or implementing AI-assisted development tooling or automated security operations within DevSecOps pipelines

Compensation/Benefits Information

(This section is only applicable to US candidates)

S&P Global states that the anticipated base salary range for this position is $150,000 to $205,000. Final base salary for this role will be based on the individual's geographic location, as well as experience level, skill set, training, licenses and certifications.

• In addition to base compensation, this role is eligible for an annual incentive plan.
• This role is eligible to receive additional S&P Global benefits.
• For more information on the benefits we provide to our employees, please

Our People

We're more than 35,000 strong worldwide-so we're able to understand nuances while having a broad perspective. Our team is driven by curiosity and a shared belief that Essential Intelligence can help build a more prosperous future for us all.From finding new ways to measure sustainability to analyzing energy transition across the supply chain to building workflow solutions that make it easy to tap into insight and apply it.

We are changing the way people see things and empowering them to make an impact on the world we live in. We're committed to a more equitable future and to helping our customers find new, sustainable ways of doing business. Join us and help create the critical insights that truly make a difference.

Benefits

• We take care of you, so you can take care of business.
• We care about our people.
• That's why we provide everything you-and your career-need to thrive at S&P Global.

Our benefits include

• Health & Wellness: Health care coverage designed for the mind and body.
• Flexible Downtime: Generous time off helps keep you energized for your time on.
• Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.
• Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.
• Family Friendly Perks: It's not just about you. S&P Global has perks for your partners and little ones, too, with some best-in class benefits for families.
• Beyond the Basics: From retail discounts to referral incentive awards-small perks can make a big difference.

Global Hiring and Opportunity at S&P Global

At S&P Global, we are committed to fostering a connected and engaged workplace where all individuals have access to opportunities based on their skills, experience, and contributions. Our hiring practices emphasize fairness, transparency, and merit, ensuring that we attract and retain top talent. By valuing different perspectives and promoting a culture of respect and collaboration, we drive innovation and power global markets.