Lead Site Reliability Engineer

Overview

Lead the AI-driven SecOps strategy and multi-year roadmap for Trimble's enterprise Azure platform, covering security architecture, resilience, and automated compliance across 22,000+ Windows VMs and 3,000+ Microsoft SQL Servers. Reports to the Director of Engineering / Head of Cloud Security.

What you'll do

• Own the AI-driven SecOps strategy and multi-year roadmap across the entire Azure infrastructure, setting architecture standards and defining security investment priorities.
• Define and govern enterprise security architecture and exception frameworks across 22,000+ Windows VMs and 3,000+ SQL Servers.
• Drive global third-party patch governance across tools such as NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti and BigFix, defining autonomous ring-based rollouts and AI-assisted troubleshooting standards to eliminate deployment failures.
• Own enterprise Azure landing zone security, Azure Policy frameworks, RBAC models, Web Application Firewall (WAF) threat thresholds, and Zero Trust adoption.
• Direct CVE analysis across Qualys, Tenable, Rapid7 and Defender and threat-intel feeds (NVD, MSRC), leveraging AI agents for triage and automated fix deployments while presenting posture metrics to executive leadership.
• Direct DR/BCP strategies, RTO/RPO targets, and compliance execution for ISO 27001, SOC 2 Type II, NIST CSF/800-53, and CIS Benchmarks, serving as the lead technical stakeholder for security audits.
• Champion security automation using PowerShell, Python, Terraform, and AI Copilots within CI/CD pipelines.
• Mentor and lead cross-functional engineering teams across North America and India.
• Serve as a primary technical authority in executive forums and shape Zero Trust adoption.

What you'll need

• 8+ years of dedicated experience in cloud security, SRE, or enterprise security operations, with proven success operating at 10,000+ endpoint scale.
• Deep technical proficiency in Azure, Microsoft Defender, Microsoft Sentinel, Azure Policy, WAF, and the Azure Well-Architected Framework.
• Hands-on experience securing Windows Server and MS SQL Server ecosystems alongside enterprise patch management platforms (Azure Update Manager, NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, or BigFix).
• Expert knowledge of CVE scoring, vulnerability scanners (Defender Vulnerability Management, Qualys, Tenable, Rapid7), and regulatory standards (ISO 27001, SOC 2 Type II, NIST CSF/800-53, CIS Benchmarks).
• Proficient in PowerShell, Python, GitHub, Azure DevOps, Terraform, and leveraging AI/Copilot tools for DevSecOps automation.
• Bachelor's degree in Computer Science, Information Technology, or a related field.

Nice to have

• Master's degree.
• Certifications: Microsoft AZ-500, CISSP, Security+, or equivalent enterprise security credentials.
• Track record of leading, mentoring, and growing global engineering teams across multiple regions and time zones.
• Experience presenting security posture metrics, risk trade-offs, and compliance progress directly to C-suite and executive stakeholders.

Details

• Location: Chennai, India.
• Employment type: Full-Time.
• Grade / Level: P3.
• Supports a follow-the-sun model across North America and India.