Senior Professional Services Technical Architect – Security

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Design and oversee secure implementations of GitLab solutions for Professional Services client projects.

• Perform security risk assessments and engage in threat modeling activities.

• Provide guidance to customers regarding GitLab SaaS, Self-Managed, and Dedicated architecture options.

• Lead technical discovery processes and steer implementation plans and deliverables.

• Facilitate migrations from legacy source code management systems, CI/CD, and application security tools to GitLab CI/CD and GitLab security scanners.

• Assist Engagement Managers with security-related statements of work, sales scope, and pre-sales preparations.

• Coordinate security implementation efforts across various cross-functional teams.

• Communicate customer requirements to Product teams to enhance security features and inform roadmap decisions.

• Mentor Professional Services and partner consultants.

• Develop security-focused delivery kits, documentation, training materials, case studies, and enablement sessions.

• Collaborate with Training, Support, Customer Success, and Program Managers to plan and execute engagements.

⛳️ Requirements

• Proven experience in delivering secure enterprise architectures in the realms of application security, cloud security, secure cloud infrastructure, and DevSecOps practices.

• Demonstrated experience in migrating source code management and CI/CD platforms with integrated security controls.

• Expertise in advising on the trade-offs of GitLab SaaS, Self-Managed, and Dedicated deployments.

• Hands-on proficiency with Ansible and Terraform.

• Familiarity with incorporating security controls into CI/CD pipelines.

• Extensive knowledge of GitLab's security scanning capabilities, such as SAST, DAST, Dependency Scanning, Secret Detection, and Container Scanning.

• Experience in migrating application security tools, including Snyk, Checkmarx, Veracode, SonarQube, and GitGuardian.

• Skilled in planning and executing security tool migrations, mapping findings, managing dismissed and accepted risk findings, and creating migration validation frameworks.

• In-depth understanding of ISO 27001, NIST 800-53, SOC 2, GDPR, and FedRAMP standards.

• Awareness of supply chain security, generative AI and LLM security risks, and zero-trust architecture principles.

• Working knowledge of the OWASP Top 10 for LLM Applications.

• Capability to articulate technical concepts to both technical and non-technical audiences.

• Proven ability to work independently and collaboratively in a fully remote, asynchronous environment.

• Team members are encouraged to integrate AI into their daily workflows.

🏝️ Benefits

• Comprehensive benefits to support your health, finances, and overall well-being.

• Flexible Paid Time Off.

• Access to Team Member Resource Groups.

• Equity Compensation & Employee Stock Purchase Plan.

• Growth and Development Fund.

• Parental Leave.

• All positions are remote.

• Incentive pay aimed at reaching up to 100% of the offered base salary for sales roles.