Staff DevSecOps Engineer

About FIA Tech

FIA Tech is the leading technology provider for exchange‑traded derivatives, serving the global network of brokers, FCMs, buy-side firms, and market infrastructure providers. Through platforms such as Atlantis, Databank, Docs, and the Trade Data Network (TDN), FIA Tech streamlines post-trade operations, data workflows, and industry collaboration.

As the listed derivatives marketplace becomes increasingly interconnected, FIA Tech is expanding its ecosystem of partners to ensure our platforms, especially TDN, are embedded in the core systems and operational workflows used across the industry.

Role Overview

We are looking for a visionary Staff DevSecOps Engineer to serve as a core contributor to both our security platform as well as our cloud platform. Operating as a high-impact individual contributor, you will partner with the Technology Operations team to define the standards, frameworks, and long-term vision for secure software engineering across the entire enterprise. You will work with the VP of TechOps to help solve the most complex technical challenges at scale and drive organizational change.

Key Responsibilities

• Provide a strong voice in the security of an enterprise-wide, multi-region SaaS platform, IAM governance strategies, and zero-trust cloud architectures. 

• Build a security platform that abstracts complex security operations, allowing developers to deploy secure, compliant workloads seamlessly. 

• Define and enforce enterprise compliance frameworks utilizing Policy-as-Code tooling such as Open Policy Agent (OPA) or Kyverno across all infrastructure and Kubernetes environments. 

• Champion a security-first culture across the broader organization, conduct architectural reviews and threat modelling exercises for mission-critical services. 

• Partner with engineering leadership to define and embed security throughout the software development lifecycle, including secure coding practices, application security testing, software supply chain security, and developer enablement. 

• Evolve and mature vulnerability management, cloud security posture management, and risk reduction programs, using automation and measurable outcomes to drive organizational security improvements.

• Evaluate, pilot, and negotiate foundational enterprise security tools, using industry-standard metrics and KPIs to measure the effectiveness of our global security posture. 

• Lead strategic application & cloud security initiatives across multi-cloud and Kubernetes environments, shaping enterprise security architecture, identity governance, and long-term security roadmaps. 

• Partner with compliance and legal to ensure accreditation across multiple industry security standards and customer security expectations.

Desired Attributes:

• Experience: 8–10+ years of engineering experience, with a proven track record of designing and scaling DevSecOps strategies at an enterprise level.

• Scale Expertise: Mastery of large-scale distributed systems, multi-cloud or hybrid-cloud environments, and complex enterprise Kubernetes topologies.

• Leadership & Influence: Demonstrated ability to influence engineering culture, align cross-functional teams, and translate complex technical security concepts to non-technical stakeholders.

• Deep Systems Knowledge: Advanced expertise in identity systems (OIDC, OAuth, Active Directory) and secrets management infrastructure (HashiCorp Vault, AWS Secrets Manager) at scale.

• Certifications (Preferred): Certified Kubernetes Security Specialist (CKS), CCSP, or advanced cloud provider architecture credentials.