DevsecOps Lead

Job Summary:

We are seeking a DevSecOps Lead to lead our Post-Quantum Cryptography (PQC) readiness initiative. In this role, you will guide a team of DevSecOps Engineers in the evaluation, selection, and integration of next-generation crypto-agility platforms. This is a senior, hands-on leadership role requiring a blend of deep technical expertise, architectural vision, and team mentorship. You will define enterprise-wide automation and integration patterns, drive Proof of Concepts (PoCs), and directly shape our long-term cryptographic security strategy.

Key Responsibilities:

• Lead, mentor, and coach DevSecOps Engineers, fostering a high-performance and collaborative culture.
• Architect and implement enterprise integration strategies for PQC tools across CI/CD pipelines, security platforms, and IT ecosystems.
• Drive and actively contribute to PoCs with leading vendors (e.g., IBM, KeyFactor, AppViewX), from setup to evaluation.
• Develop automation frameworks, reusable scripts, and integration modules to streamline tool adoption and future crypto-automation.
• Act as the primary technical liaison with vendors, presenting findings and recommendations to senior leadership.
• Establish and document best practices for cryptographic discovery, inventory management, and automated remediation.
• Serve as the final escalation point for complex technical challenges, ensuring resilient and secure solutions.
  
  

Qualifications:

• 8 years of experience in DevSecOps, Cybersecurity Engineering, or Solutions Architecture, including at least 2 years in a leadership role.
• Deep expertise in CI/CD pipeline design and security (Jenkins, GitLab CI, GitHub Actions).
• Strong proficiency in scripting (Python, Go, or Bash) and Infrastructure-as-Code (Terraform, Ansible).
• Proven experience integrating security tools (SAST, DAST, SCA, SIEM) into automated workflows.
• Solid understanding of PKI, TLS, digital certificates, and cryptographic principles; PQC knowledge preferred.
• Demonstrated ability to design scalable, resilient, and secure system integrations, with strong documentation and communication skills.
• Hands-on mindset, with the ability to balance leadership and technical contribution.
  
  

Key Responsibilities:

• Lead, mentor, and coach DevSecOps Engineers, fostering a high-performance and collaborative culture.
• Architect and implement enterprise integration strategies for PQC tools across CI/CD pipelines, security platforms, and IT ecosystems.
• Drive and actively contribute to PoCs with leading vendors (e.g., IBM, KeyFactor, AppViewX), from setup to evaluation.
• Develop automation frameworks, reusable scripts, and integration modules to streamline tool adoption and future crypto-automation.
• Act as the primary technical liaison with vendors, presenting findings and recommendations to senior leadership.
• Establish and document best practices for cryptographic discovery, inventory management, and automated remediation.
• Serve as the final escalation point for complex technical challenges, ensuring resilient and secure solutions.
• Qualifications:
• 8 years of experience in DevSecOps, Cybersecurity Engineering, or Solutions Architecture, including at least 2 years in a leadership role.
• Deep expertise in CI/CD pipeline design and security (Jenkins, GitLab CI, GitHub Actions).
• Strong proficiency in scripting (Python, Go, or Bash) and Infrastructure-as-Code (Terraform, Ansible).
• Proven experience integrating security tools (SAST, DAST, SCA, SIEM) into automated workflows.
• Solid understanding of PKI, TLS, digital certificates, and cryptographic principles; PQC knowledge preferred.
• Demonstrated ability to design scalable, resilient, and secure system integrations, with strong documentation and communication skills.
• Hands-on mindset, with the ability to balance leadership and technical contribution.
  
  

HCLTech is not the employer for this role. This work is contracted through a third-party whose employees provides services to HCLTech and/or its clients.

Candidates interested in applying for this Contract opportunity must have a valid work authorization to work in the United States. We do not accept agency resumes and are not responsible for any fees related to unsolicited resumes. Candidates who are currently employed by a client of HCLTech may not be eligible for consideration, as decided on an individualized basis depending upon business considerations.

The expected pay range for this contract assignment is shown above with the Job details. The exact pay rate will vary based on skills, experience, and location and will be determined by the third-party employer.

HCLTech is an equal opportunity employer, committed to providing equal employment opportunities to all applicants and employees regardless of race, religion, sex, color, age, national origin, pregnancy, sexual orientation, physical disability or genetic information, military or veteran status, or any other protected classification, in accordance with federal, state, and/or local law. Should any applicant have concerns about discrimination in the hiring process, they should provide a detailed report of those concerns to secure@hcltech.com for investigation.