Staff Engineer, Platform and DevSecOps
LG Ad Solutions
LG Ad Solutions is a global leader in connected TV (CTV) and cross-screen advertising. We pride ourselves on delivering state-of-the-art advertising solutions that integrate seamlessly with today's ever-evolving digital media landscape.
The Opportunity:
We're looking for a Platform-minded Staff Engineer with deep DevSecOps expertise. You'll lead a team that builds and operates secure, reliable, developer-friendly platform capabilities—accelerating delivery while upholding enterprise security and compliance. You'll own people leadership, delivery execution, and technical stewardship across CI/CD, cloud infrastructure, containers/Kubernetes, observability, and security-by-default practices.
Responsibilities:
People & Team Leadership
Hire, grow, and retain a high-performing Platform/DevSecOps team; set goals, provide coaching, conduct performance reviews, and create growth plans.
Establish team rituals (standups, 1:1s, postmortems) and a culture of ownership, inclusion, psychological safety, and continuous improvement.
Manage capacity, on-call rotations, and team health; ensure sustainable delivery and clear escalation paths.
Delivery, Roadmap & Stakeholder Management
Own the platform roadmap and quarterly OKRs; balance security, reliability, and developer experience with product priorities.
Partner with Security, Data, SRE, and Application teams to define interfaces, SLAs/SLOs, and shared accountability.
Translate business needs into well-scoped initiatives with outcomes, success metrics, and launch criteria.
Technical Strategy & Governance
Set technical direction for build/release, infrastructure automation, runtime platforms (Kubernetes/EKS), and observability.
Define and enforce guardrails (policies, templates, golden paths) that enable autonomy with compliance.
Drive cost, performance, and availability improvements; champion "paved roads" and reusable platform components.
DevSecOps Implementation
Implement and maintain CI/CD pipelines (GitHub Actions, Jenkins or similar) and progressive delivery practices.
Build and operate secure cloud infrastructure (AWS) using IaC (Terraform/CDK/Pulumi) with policy-as-code and drift controls.
Embed security best practices: image signing/SCAs, secrets management, least-privilege IAM, network segmentation, and runtime hardening.
Security, Compliance & Risk
Run regular security assessments and vulnerability scans; partner with Security on remediation SLAs and exceptions.
Ensure compliance with enterprise standards and applicable regulations; maintain audit-ready evidence and documentation.
Monitoring, Reliability & Incident Response Establish end-to-end observability (logs, metrics, traces) and actionable alerting.
Lead incident response for platform services, drive post-incident reviews, and track reliability work to closure.
Documentation & Communication
Maintain clear, up-to-date documentation (runbooks, standards, reference architectures).
Communicate priorities, trade-offs, and status to engineers, leadership, and cross-functional partners.
Requirements:
10+ years hands-on in Platform/SRE/DevOps, with 2+ years leading engineers (people management and hiring).
5+ years hands-on in Platform/SRE/DevOps, with 2+ years leading engineers (people management and hiring).
Proven delivery of secure, reliable platforms supporting multiple product teams. Strong Linux fundamentals, networking, and troubleshooting chops.
Proficiency in Python/Bash and automation around CI/CD, infra, and ops.
Deep experience with AWS (EKS/ECS/EC2/RDS/DocumentDB/DynamoDB, IAM, VPC, security groups).
Containers & orchestration (Docker, Kubernetes), including cluster operations in AWS.
IaC expertise (Terraform preferred; CDK/Pulumi a plus) and sound IaC management practices (modularity, versioning, review, drift detection).
Observability toolset familiarity (logging, metrics, tracing, SIEM/IDS concepts).
Security best practices across build, deploy, and runtime; RBAC/ABAC and identity standards (OAuth, SAML).
Preferred:
AWS Certified DevOps Engineer – Professional (strongly preferred) and/or AWS SA (Assoc/Pro).
Experience defining SLOs/error budgets, leading on-call, and running blameless postmortems. Nice to have (not required)
Experience with secrets management and security remediation.
Familiarity with data platforms (e.g. Databricks) or edge/streaming workloads.
Bachelor's in Computer Science, Information Systems, or equivalent practical experience.
LG Ad Solutions provides equal work opportunities to all team members and applicants, and it prohibits discrimination and harassment of any type on the basis of race, color, ethnicity, caste, religion, age, sex (including pregnancy), national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by our policies or federal, state, or local laws.
We want to ensure that our hiring process is accessible. If you need reasonable accommodation for any part of the application process because of a medical condition or disability, please send an email to careers@lgads.tv to let us know the nature of your request.