Senior Engineering Manager, Platform & DevSecOps

We require people to be on-site, 4 days/week (Mon - Fri) at our Denver (Cherry Creek) office.

The Opportunity

We’re seeking a Senior Engineering Manager with deep Platform and DevSecOps expertise to lead a team building secure, reliable, and developer-friendly platform capabilities. You’ll own the strategy, people leadership (including managing tech leads), roadmap execution, and governance across CI/CD, cloud infrastructure, containers/Kubernetes, observability, cost, and security-by-default practices. Your responsibilities include delivering at scale, partnering with Product, Security, and Data to create paved roads that accelerate the entire engineering org.

Responsibilities

People, Org & Leadership

• Build and lead a Platform/DevSecOps team; hire, coach, develop, and retain top talent.
  

• Establish career ladders, growth plans, and succession planning; run healthy on-call rotations and capacity planning.
  

• Foster a culture of ownership, inclusion, and continuous improvement (blameless postmortems, strategic retention).

Strategy, Roadmap & Stakeholders

• Own the platform strategy and multi-quarter roadmap; define OKRs that balance developer velocity, reliability, security, and cost.
  

• Translate business goals into measurable outcomes; set and track success metrics (change failure rate, MTTR/MTTD, lead time).
  

• Partner with Product, Security, Data, and Application leaders to define interfaces, SLAs/SLOs, and shared accountability.

Platform Architecture & Governance

• Set technical direction for build/release, infrastructure automation, Kubernetes/EKS runtime, and observability.
  

• Establish guardrails (golden paths, templates, policy-as-code, org standards) to enable autonomy with compliance.
  

• Drive cost, performance, and availability improvements; own platform budgets/forecasts and FinOps practices.

DevOps & Security

• Standardize CI/CD (GitHub Actions/Jenkins or similar), artifact signing/SBOM, progressive delivery (blue-green/canary).
  

• Enforce security-by-design: SCA/SAST/DAST in pipelines, secrets management, least-privilege IAM, network segmentation, runtime hardening.
  

• Lead remediation SLAs with Security; maintain audit-ready evidence for enterprise standards and regulations.

Cloud Infrastructure & Reliability

• Operate secure cloud platforms (AWS) via IaC (Terraform/Pulumi) with drift detection and change controls.
  

• Define and enforce SLOs/error budgets; lead incident response for platform services, drive post-incident actions to closure.
  

• Ensure multi-region resiliency where required; own backup/restore strategies and disaster recovery readiness.

Communication, Documentation & Change Management

• Publish clear reference architectures, runbooks, and standards; keep documentation current and discoverable.

Communicate priorities, trade-offs, and status to execs and cross-functional partners; influence with data.

Requirements:

• Bachelor’s in Computer Science, Information Systems, or equivalent practical experience.

• 10+ years total experience in Platform/SRE/DevOps/Infrastructure, including 4+ years leading engineers with at least 2+ years managing tech leads or multiple teams.
  

• Proven track record delivering secure, reliable, cross-team platforms serving many product squads.
  

• Strong Linux, networking, and troubleshooting fundamentals.
  

• Proficiency in Python/Bash; automation around CI/CD, infra, and operations.
  

• Deep AWS experience (EKS/ECS/EC2/RDS/DocumentDB/DynamoDB, IAM, VPC, security groups) and Kubernetes in AWS.
  

• IaC expertise (Terraform preferred; Pulumi a plus) with sound practices (modularity, versioning, policy checks, drift detection).
  

• Observability at scale (logs/metrics/traces, alerting design, SLOs) and incident management/command skills.
  

Security best practices across build/deploy/runtime; RBAC/ABAC and identity standards (OAuth, SAML, OIDC); secrets management.

Preferred:

• AWS DevOps Engineer – Professional and/or AWS Solutions Architect (Assoc/Pro).
  

• Exposure to data platforms (e.g., Databricks), streaming/edge workloads, or hybrid/private networking patterns.
  

• Vendor and budget management; contract evaluation and TCO/ROI analysis.