Remote :: Lead DevOps Architect with Privileged Access Management (PAM)

Remote :: Lead DevOps Architect Privileged Access Reduction Program

Role Summary

The Lead DevOps Architect will own the technical execution and automation strategy for eliminating standing privileged access across 12,000 Linux and 13,000 Windows servers. This role bridges security, infrastructure, and DevOps, ensuring privilege reduction is delivered at scale without operational disruption.

Key Responsibilities

• Design and lead automation-first privileged access remediation
• Define secure-by-default pipelines for system changes and package installation
• Integrate IAM/PAM tooling with CI/CD and infrastructure automation and API design and development
• Lead DevOps engineers in building:
• Linux Sudo automation
• Windows JEA / DSC pipelines
• Enforce immutable infrastructure and least privilege patterns
• Partner with Security and IAM to translate policy into automation
• Support phased rollout using canary wave-based deployment
• Own rollback strategies and failure recovery patterns
• Provide technical leadership during Tier-1 production rollout

Required Experience

• 10+ years in DevOps / Platform Engineering
• 5+ years leading enterprise-scale automation programs
• Strong Linux & Windows server engineering background
• Deep experience with:
• Ansible / Terraform
• CI/CD pipelines
• Configuration management (DSC, Puppet, Chef)
• Proven experience operating at 10k+ server scale

Desired Skills

• PAM integration experience (CyberArk, BeyondTrust, Azure PIM)
• Secure software supply chain practices
• Zero Trust architecture familiarity
• Cloud & hybrid infrastructure exposure

Thanks,

IT First Source