Director, Open-Source Software Manager

Grade Level (for internal use): 13 The Team: Our Corporate Technology team serves as the centralized platform engineering function, establishing enterprise-wide DevSecOps standards and architectural patterns that enable secure, scalable software delivery across all business units. We are the strategic technology backbone that empowers global development teams through standardized platforms, governance frameworks, and innovative open-source solutions. The team values technical excellence, cross-functional collaboration, and driving organizational impact through thoughtful architecture decisions that balance security, compliance, and developer productivity.

Define and evolve enterprise DevSecOps architecture standards, reference patterns, and security-by-design practices that strengthen software delivery across global teams Design and implement secure CI/CD pipelines, container orchestration platforms, and artifact management governance models that support enterprise scale, resilience, and regulatory compliance Lead cross-functional collaboration with engineering, platform, infrastructure, and security stakeholders to align architecture decisions with business priorities and risk management objectives Assess emerging open-source technologies and guide strategic platform modernization initiatives that enhance developer productivity and operational excellence Develop comprehensive architectural documentation, standards, and roadmaps that enable consistent implementation and knowledge sharing across distributed teams Mentor technical teams on security-by-design principles, modern software supply chain practices, and platform engineering best practices What We're Looking for Required Qualifications: 12+ years of progressive experience in DevOps, DevSecOps, platform engineering, security engineering, or solution architecture roles with demonstrated leadership impact Proven experience designing and implementing secure platform architectures for CI/CD systems, container orchestration platforms (such as Kubernetes, Docker Swarm, or OpenShift), and enterprise software delivery environments Strong expertise with artifact management solutions (such as JFrog Artifactory, Nexus Repository, or Azure Artifacts), version control platforms (including GitHub Enterprise, GitLab, or Bitbucket), and infrastructure automation technologies Exceptional communication and stakeholder management skills with the ability to influence technical direction and drive alignment across global, cross-functional teams Experience embedding security-by-design principles across application delivery, containerization, and software supply chain practices Bachelor's degree in Computer Science, Information Security, Engineering, or related discipline, or equivalent practical experience demonstrating technical leadership capabilities Preferred Qualifications: Experience with policy-as-code frameworks (such as Open Policy Agent, Falco, or Gatekeeper), secrets management platforms (including HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault), and infrastructure as code tools (such as Terraform, Pulumi, or CloudFormation) Deep knowledge of software bill of materials (SBOM), vulnerability scanning solutions (such as Twistlock, Aqua Security, or Snyk), zero trust security principles, and regulatory compliance frameworks Relevant industry certifications such as Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS), CISSP, Security+, cloud security certifications, or enterprise architecture credentials Experience leading platform engineering initiatives and modernization programs in global, distributed technology organizations Compensation/Benefits Information:  (This section is only applicable to US candidates)   S&P Global states that the anticipated base salary range for this position is $174,000 to $200,000. The final base salary for this role will be based on the individual’s