Job Description:
Position Overview
The primary responsibility of the Executive Director - Central Head of DevSecOps is to oversee the standards, tooling and organizations globally providing infrastructure, application security, administration, configuration, troubleshooting, automation and delivery lifecycle of solutions within Sands.
The DevSecOps functions globally will deploy and support cloud and on-premises infrastructure and services to meet the requirements of business or IT initiatives. The teams will develop, maintain and execute infrastructure as code scripts and playbooks to automate deployment and maintenance tasks to ensure the availability, reliability, and efficient operation of the enterprise systems.
The Executive Director will work with the leads of DevSecOps globally to ensure consistency across their local disciplines, optimize solutions, and to ensure best practice DevOps and security measures are applied to the solutions. The position demands someone who is highly technically competent, detail oriented, and driven to stay current with evolving technologies.
In this role, the Executive Director will be responsible for managing the global teams of DevOps Engineers, and AppSec Engineers responsible for overall technical security posture of developed applications and infrastructure.
The DevSecOps teams will work closely with the Corp IT and Corp Cyber Security leadership in coordinating the strategy, architecture and security initiatives and all auditing activities across all team activities. A key part of the position is supporting compliance efforts related to secure SDLC processes and infrastructure
All duties are to be performed in accordance with departmental and Las Vegas Sands Corp.’s policies, practices, and procedures. All Las Vegas Sands Corp. Team Members are expected to conduct and carry themselves in a professional manner at all times. Team Members are required to observe the Company’s standards, work requirements and rules of conduct.
Essential Duties & Responsibilities
Responsible for leadership of DevSecOps globally
Responsible for oversight of teams of DevOps and DevSecOps professionals and outsourced partners in all Sands’ subsidiaries
Responsible for setting and executing strategy for platform engineering, DevOps and DevSecOps
Responsible for DevSecOps resourcing for subsidiaries demand
Drive the DevSecOps agenda globally, setting objectives and continuously improving execution across all activities
Develop a deep understanding of the products and set strategic tooling roadmap for each subsidiary
Develop partnerships between DevSecOps and other Corp functions and departments
Define KPIs, metrics to measure DevSecOps effectiveness and performance
Ensures all team members and vendor partners understand performance expectations and manages delivery accordingly
Drives the performance of embedded professionals within agile product development teams
Provides strategic direction and oversight for the execution of quality and testing cloud systems
Ensures that the team develop detailed, comprehensive, and well-structured test plans and test cases
Manges the portfolio of prioritized and planned testing activities
Responsible for securing, monitoring and maintaining infrastructure for in-house developed applications
Champion collaboration across IT and business functions
Independently contribute to team objectives
Mentor, support, and cross-train team members
Contribute suggestions for new products, services, and processes to ensure best in class customer service
Contribute to self-service knowledgebase, operational procedures, and documents
Consistently demonstrate professionalism in all interactions
Execute business communication on system planned maintenance, incident status notifications and other customer communications
Responsible for designing solutions to complex technical issues and working with other technology or cyber security experts, including architects and vendors
Provides and drives success of frameworks to enable any technical problems discovered by DevOps, development, or testers and any internal clients to be resolved
Provide deep subject matter expertise across multiple disciplines including IT infrastructure, security, business application and system integration
Responsible for the successful utilization of cloud offerings including, but not limited to, Alibaba, Amazon Web Services, Azure, and Google Cloud Platform
Perform job duties in a safe manner
Attend work as scheduled on a consistent and regular basis
Perform other related duties as assigned.
Minimum Qualifications
At least 21 years of age
Proof of authorization to work in the United States.
Bachelor’s Degree in Computer Science, Engineering or related discipline required
Advanced degree in technology or engineering is a plus
10+ years proven experience of leading distributed DevOps and DevSecOps groups with expertise in developments within public cloud providers, or SaaS solutions and supporting software development in agile environments.
Experience in cloud based containerized environments (Kubernetes, Docker)
Knowledge of 3rd party library security scanning, static code scanning, code hygiene, dynamic code scanning,
Knowledge of container security, AWS EKS, Azure AKS, Helm
Knowledge of IAM, cloud trail, guard duty, WAF, SDLC practices, basic scripting skills
Experience with common programming and scripting languages, such as Golang, Ruby, C/C++, C#, Python, JavaScript, Bash
Latent desire and/or curiosity in related domain like software development, front-end engineering, security or project management
Experience with JIRA, Confluence, GitHub, CI/CD tooling
Able to Multi-task and handle various types of requests from different people/areas
Strong analytical and problem-solving skills
Effective written and verbal communication skills in English