Lead Site Reliability Engineer

Job description

Pioneer Autonomous Security Scale as a Lead AI SecOps Engineer Are you an experienced cloud security and SRE leader ready to own the AI-driven SecOps strategy for a massive global infrastructure? Trimble is seeking a P3 Lead AI SecOps Engineer to oversee the security architecture, resilience, and automated compliance across our enterprise Azure platform. Operating across a large-scale estate of 22,000+ Windows Virtual Machines and 3,000+ Microsoft SQL Servers, you will combine Site Reliability Engineering (SRE), Zero Trust architecture, and AI-driven automation to ensure our systems remain secure, compliant, and highly available.  About Us: Dedicated to the world’s tomorrow, Trimble is a technology company delivering solutions that enable our customers to work in new ways to measure, build, grow and move goods for a better quality of life. Core technologies in positioning, modeling, connectivity and data analytics connect the digital and physical worlds to improve productivity, quality, safety, transparency and sustainability. From purpose-built products and enterprise lifecycle solutions to industry cloud services, Trimble is transforming critical industries such as construction, geospatial, agriculture and transportation to power an interconnected world of work. For more information about Trimble (NASDAQ: TRMB), visit: www.trimble.com Our SecOps Ecosystem: Our Global AI Site Reliability & Security Operations (AI-SecOps) team integrates cutting-edge AI tools, autonomous patch orchestration, and DevSecOps pipelines to safeguard Trimble's enterprise infrastructure, ensuring compliance with global benchmarks while protecting global customer workflows.  What Makes This Role Great: As a P3 Lead Engineer reporting directly to the Director of Engineering / Head of Cloud Security, you will have end-to-end strategy ownership for multi-year security roadmaps, autonomous patching frameworks, and AI-driven CVE remediation. Supporting a follow-the-sun model across North America and India, you will serve as a primary technical authority in executive forums, shape Zero Trust adoption, and mentor a high-performing global engineering team. This position offers a high-visibility platform to transform enterprise-level SecOps using modern AI and automation capabilities.  Key Exciting Responsibilities • Enterprise AI-SecOps Strategy: Own the AI-driven SecOps strategy and multi-year roadmap across our entire Azure infrastructure, setting architecture standards and defining security investment priorities. • Windows & SQL Server Infrastructure Security: Define and govern enterprise security architecture and exception frameworks across 22,000+ Windows VMs and 3,000+ SQL Servers. • Third-Party Patch Governance & AI Orchestration: Drive global third-party patch governance (across tools like NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, BigFix), defining autonomous ring-based rollouts and AI-assisted troubleshooting standards to eliminate deployment failures. • Azure Governance, WAF & Zero Trust: Own enterprise Azure landing zone security, Azure Policy frameworks, RBAC models, Web Application Firewall (WAF) threat thresholds, and Zero Trust adoption. • AI-Driven Vulnerability & CVE Remediation: Direct CVE analysis across platforms (Qualys, Tenable, Rapid7, Defender) and threat-intel feeds (NVD, MSRC), leveraging AI agents for triage and automated fix deployments while presenting posture metrics to executive leadership. • Cloud Resilience & Global Audit Compliance: Direct DR/BCP strategies, RTO/RPO targets, and compliance execution for ISO 27001, SOC 2 Type II, NIST CSF/800-53, and CIS Benchmarks, serving as the lead technical stakeholder for security audits. • Security Automation & Global Leadership: Champion security automation using PowerShell, Python, Terraform, and AI Copilots within CI/CD pipelines, while mentoring and leading cross-functional engineering teams across North America and India.  Essential Skills & Experience • Professional Experience: 8+ years of dedicated experience in cloud security, SRE, or enterprise security operations, with proven success operating at 10,000+ endpoint scale. • Cloud & Security Mastery: Deep technical proficiency in Azure, Microsoft Defender, Microsoft Sentinel, Azure Policy, WAF, and the Azure Well-Architected Framework. • Infrastructure & Patch Tooling Expertise: Hands-on experience securing Windows Server and MS SQL Server ecosystems alongside enterprise patch management platforms (Azure Update Manager, NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, or BigFix). • Vulnerability Management & Frameworks: Expert knowledge of CVE scoring, vulnerability scanners (Defender Vulnerability Management, Qualys, Tenable, Rapid7), and regulatory standards (ISO 27001, SOC 2 Type II, NIST CSF/800-53, CIS Benchmarks). • Automation & DevOps: Proficient in PowerShell, Python, GitHub, Azure DevOps, Terraform, and leveraging AI/Copilot tools for DevSecOps automation. • Education: Bachelor's degree in Computer Science, Information Technology, or a related field (Master's degree preferred).  Bonus Points For: • Certifications: Microsoft AZ-500, CISSP, Security+, or equivalent enterprise security credentials. • Global Team Leadership: Track record of leading, mentoring, and growing global engineering teams across multiple regions and tim