Senior Manager, DevSecOps

A position at White Cap isn’t your ordinary job. You’ll work in an exciting and diverse environment, meet interesting people, and have a variety of career opportunities.

The White Cap family is committed to Building Trust on Every Job. We do this by being deeply knowledgeable, fully capable, and always dependable, and our associates are the driving force behind this commitment.

Responsible for leading the strategy, governance, and execution of enterprise Development, Security, and Operations (DevSecOps) capabilities that enable secure, compliant, reliable, and efficient software delivery. Establish standards, automation frameworks, and consistent practices across source control, code quality, Infrastructure as Code (IaC), Continuous Integration and Continuous Delivery (CI/CD), Artificial Intelligence (AI) solution delivery, and secure software development. Build a high-performing, dependable team and partners transparently across technology, security, risk, and audit functions.

Major Tasks, Responsibilities and Key Accountabilities

•Defines and executes the enterprise DevSecOps strategy, roadmap, operating model, governance, policies, standards, and reusable practices.

•Partners with Information Security to embed secure software development lifecycle controls, including secure coding, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), vulnerability remediation, and risk-based quality gates, across delivery workflows.

•Oversees enterprise CI/CD, source control, and Agile delivery platforms, including GitHub Enterprise, GitHub Actions, and Azure DevOps, and establishes reliable administration, access, pipeline, deployment, and release-management standards.

•Establishes enterprise standards for source control, branching, pull requests, code reviews, build automation, testing, deployment automation, release management, and infrastructure as code.

•Governs secure delivery standards for AI, machine learning, and generative AI solutions, including pipeline controls, prompt management, model lifecycle management, deployment, and AI security practices.

•Drives adoption of DevSecOps practices through practical training, coaching, transparent guidance, and close partnership with developers, architects, engineers, delivery teams, and technology leaders.

•Establishes and monitors DevSecOps KPIs and engineering-effectiveness measures and provides leadership with clear reporting on maturity, risk, performance, and continuous-improvement priorities.

•Leads, coaches, and develops assigned associates, participate in employment decisions, and supports performance, engagement, accountability, and business results.

•Performs other duties as assigned.

Nature and Scope

• Solutions require analysis and investigation.
• Achieves planned results by decisions and actions based on professional methods, business principles, and practical experience. May recommend/make decisions regarding new programs/initiatives that have significant impact to the business and carry consequences in unsuccessful endeavors.
• Manages a larger team or multiple small teams through direction of subordinate management and/or supervisory staff.

Work Environment

• Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.
• Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.
• Typically requires overnight travel less than 10% of the time.

Education and Experience

• Typically requires BS/BA in a related discipline. Generally 7+ years of experience in a related field. May require certification. Advanced degree may offset less experience in some disciplines.

Preferred Qualifications

•7+ years of progressive experience in software engineering, DevOps, DevSecOps, platform engineering, or related technology delivery, including experience leading teams.

•Prefer experience implementing an enterprise DevOps or DevSecOps transformation.

•Prefer hands-on knowledge of GitHub Enterprise, GitHub Actions, Azure DevOps, Azure Pipelines, Bitbucket, Jira, SAST, DAST, and infrastructure-as-code technologies.

•Prefer experience governing AI, machine learning, or generative AI delivery pipelines and model lifecycle controls.

•Prefer Certified Scrum Master (CSM) or an equivalent Agile certification.

If you’re looking to play a role in building America, consider one of our open opportunities. We can’t wait to meet you.