Senior Professional Services Technical Architect – Security at GitLab

About the role

Security technical architect designing secure DevSecOps solutions for GitLab enterprise clients across AMER. Leading security assessments, compliance implementations, and migrations to GitLab security tooling.

Design and lead secure GitLab solution implementations for Professional Services client engagements
Conduct security risk assessments and threat modeling
Advise customers on GitLab SaaS, Self-Managed, and Dedicated architecture choices
Lead technical discovery and guide implementation plans and deliverables
Lead migrations from legacy source code management, CI/CD, and application security tools to GitLab CI/CD and GitLab security scanners
Support Engagement Managers with security-related statements of work, sales scoping, and pre-sales planning
Coordinate security implementation work across cross-functional teams
Share customer needs with Product teams to inform security features and roadmap decisions
Mentor Professional Services and partner consultants
Create security-focused delivery kits, documentation, training materials, case studies, and enablement sessions
Partner with Training, Support, Customer Success, and Program Managers to plan and deliver engagements

Experience delivering secure enterprise architectures across application security, cloud security, secure cloud infrastructure, and DevSecOps practices
Experience migrating source code management and CI/CD platforms with security controls
Experience advising on GitLab SaaS, Self-Managed, and Dedicated deployment tradeoffs
Hands-on experience with Ansible and Terraform
Experience integrating security controls into CI/CD pipelines
Deep knowledge of GitLab security scanning capabilities, including SAST, DAST, Dependency Scanning, Secret Detection, and Container Scanning
Experience migrating application security tooling, including Snyk, Checkmarx, Veracode, SonarQube, and GitGuardian
Experience planning and executing security tool migrations, mapping findings, managing dismissed and accepted risk findings, and building migration validation frameworks
Knowledge of ISO 27001, NIST 800-53, SOC 2, GDPR, and FedRAMP
Understanding of supply chain security, generative AI and LLM security risks, and zero-trust architecture
Working knowledge of the OWASP Top 10 for LLM Applications
Ability to communicate technical concepts to technical and non-technical stakeholders
Ability to work independently and collaboratively in an all-remote, asynchronous environment
Team members are expected to incorporate AI into daily workflows