Senior R&D Operations Manager - DevSecOps Job Req #0225-088

Why Work at Ross Video? We have a great group of people working together to create and deliver cutting edge products that look amazing and are easy to use. We go all out so that our customers can have the best possible experience and achieve quality results. With a product focus, continual learning, results driven processes, and creative thinking, we constantly strive to improve our solutions and to deliver results. If you've ever watched live television, news, sports, or entertainment, you've seen our products in use. All of the major Hollywood award shows, most professional sports teams, and many of the largest broadcasters in the world use Ross Video technology. Get behind the scenes and learn about what it takes to make live events possible. If that resonates, and you're someone with integrity, commitment, and a strong drive to deliver great products, we'd love to hear from you.

The R&D Operations team provides support across the entire R&D organization, helping with program status reporting, transfer to manufacturing, training programs, process development, tools development & support, test automation, coordinating centralized support, site-wide social activities, patent applications, and a bunch of other stuff to help the R&D team as a whole be as effective as possible. We are the grease or the glue (depending on the situation!) and get to work with several corporate functions outside of R&D, including facilities, finance, manufacturing, tech support, sales, marketing and IT/IS.

As part of this team, the Senior R&D Operations DevSecOps Manager will drive our infrastructure automation, operational efficiency, and delivery excellence. Your role will involve designing and assisting with the implementation of strategies to enhance automation, streamline processes, and ensure the security, scalability, and reliability of Ross Video's products and services.

This is a key leadership role where you will champion DevSecOps culture across the organization, mentor teams, assist with implementing cutting-edge security technologies, and play a pivotal part in Ross Video's commitment to delivering secure and innovative solutions to our global customers.

Who you report to: Director, Program Management - R&D

Work Arrangement: 1-2 days in Office per week

What we offer: Ross offers competitive salaries and comprehensive health plans, as well as several perks to help you perform at your best. Some of these perks include flexible hours, generous paid time off, fitness/wellness allowance, employee share ownership program, professional development support and a ton of fun social activities and events! Best of all, you will be part of the Ross Video team, and we've got a pretty energizing environment here.

What the job is all about:

Strategic Leadership:

1. Define and execute the DevSecOps vision, strategy, and roadmap.
2. Lead collaboration across product teams, IT, and operations to enhance delivery pipelines and infrastructure reliability.
3. Collaborate with Product Security, product teams, and IT to integrate security practices into software development and operational workflows.
4. Advocate for a 'shift-left' security culture to address risks early in the development process.
5. Establish best practices for CI/CD pipelines, infrastructure as code (IaC), and monitoring systems.
6. Drive continuous improvement in deployment speed, system reliability, and operational efficiency.

Infrastructure and Automation:

1. Provide guidance for the design, deployment, and maintenance of scalable, secure, and resilient infrastructure (on-premises and/or cloud).
2. Identify opportunities and automate repetitive tasks, system deployments, and configuration management.
3. Work with product teams to optimize resource usage, costs, and performance for cloud and on-prem environments.

Process Optimization:

1. Work with product teams to implement and manage robust CI/CD pipelines to ensure rapid, reliable, and secure software releases.
2. Provide guidance for the development and enforcement of policies for source control, branching, and merging strategies.
3. Work with the Product Security team to ensure compliance with industry standards and organizational security policies.

Monitoring and Incident Response:

1. Develop and maintain monitoring, logging, and alerting systems for production and development environments, working with the product teams as appropriate.
2. Manage incident response processes, root cause analysis, and post-mortem reporting for infrastructure within scope of responsibility.
3. Drive operational excellence by identifying and mitigating system bottlenecks or vulnerabilities.

Stakeholder Engagement:

1. Collaborate with leadership to align DevSecOps initiatives with broader business objectives.
2. Act as a technical advisor to development teams, ensuring infrastructure meets application requirements.
3. Communicate technical concepts and progress to non-technical stakeholders effectively.

Team Leadership:

1. Working with the Product Security team, mentor and coach engineering and IT teams on secure coding practices and secure architecture principles.
2. Build and manage a high-performing DevSecOps team, fostering continuous learning and innovation.
3. Act as a subject matter expert, providing thought leadership on DevSecOps trends and advancements.

Security Integration:

1. Embed security tools and practices into CI/CD pipelines to automate vulnerability detection and compliance.
2. Lead initiatives to improve automation of security testing and monitoring.
3. Evaluate and integrate cutting-edge DevSecOps tools and technologies to enhance the overall security posture.

Automation:

1. Advocate for a culture of automation, continuous improvement, and operational efficiency.
2. Automating security testing and compliance checks within CI/CD pipelines.
3. Automating all security testing tasks and implementing gates to ensure a secure product.

Who you are:

1. Bachelor's or Master's degree in Computer Science, Engineering, or a related field.
2. 8+ years in DevOps, security engineering, or a related role, with at least 3 years in a leadership position.
3. Hands-on experience in designing, deploying, and maintaining secure CI/CD pipelines and infrastructure.
4. Hands-on experience with cloud platforms (AWS, Azure, GCP).
5. Proficiency in IaC tools like Terraform, CloudFormation, or Ansible.
6. Deep understanding of CI/CD tools (Jenkins, GitHub Actions, GitLab CI, etc. ).
7. Familiarity with containerization technologies (Docker, Kubernetes).
8. Strong scripting and programming skills (Python, Bash, Go, etc. ).
9. Expertise in monitoring and logging tools (Prometheus, Grafana, ELK stack).
10. Strong knowledge of cybersecurity frameworks, threat modeling, and risk assessment techniques.
11. Experience with security tools like SAST, D.