Manager of DevOps

Position Summary
This position is a 100% remote work arrangement consistent with System Office policy. UNC Chapel Hill employees are generally required to reside in North Carolina within a reasonable commuting distance of their assigned duty station. The Information Security Office ( ISO ) coordinates the Universitys cybersecurity program. ISO operates critical common controls evaluates security performance and proposed changes to the program and works continuously to improve the institutions response to cyber risk. ISO reports on program effectiveness and direction to the Chancellor Provost and Board of Trustees. Within ISO the Security DevOps team is the default owner of security tooling across all ISO functions. The team delivers security outcomes across identity infrastructure security data management the unified security self-service portal and is the owner of common controls not assigned to another ISO team. The team operates on a buy-before-build model prioritizing integration work over custom development when feasible. The Security DevOps team operates as a program-advancing engineering team it defines technical requirements and implementation approach within its portfolio drives implementation and owns the results operating to technical and operational standards the team sets to ensure rigor reliability security and adaptability. The Manager of Security DevOps is accountable for security technology outcomes across the entire ISO portfolio. This role sets the technical direction for the teams portfolio and owns the operational results. The teams priorities are set by the manager in response to the institutions written security strategy and in consultation with the CISO . For major security initiatives desired outcomes policy direction and business process requirements are established through structured analysis led by the Analysis Architecture and Communications ( AAC ) team; the Manager of Security DevOps partners with AAC in planning the technical implementation and owns solution architecture technical standards and delivery. The Manager oversees the use of modern DevOps practices focusing on sustainable scalable and secure practices. Careful attention is paid to automation and integration deploying commercially available or open-source systems reducing the number of lines of in-house code. The buy-before-build model means vendor selection contract negotiation and ongoing vendor management are core responsibilities. The manager builds manages and develops an engineering team operating across software development automation operations and user experience functions. This role requires active coordination across ISO teams and with University partners including central IT procurement legal and academic units to ensure security technology decisions are well-integrated with institutional operations.

Required Qualifications Competencies And Experience
Seven or more years of experience in software development systems engineering or DevOps roles with demonstrated progression in responsibility. At least three years managing or leading technical teams. Experience operating in a large complex organization with multiple stakeholders and competing priorities is required. Knowledge and Skills Demonstrated command of modern DevOps practices including automation CI/CD pipelines infrastructure as code and integration-first system design Demonstrated experience building or operating systems with security reliability or compliance requirements Demonstrated ability to manage a technology portfolio across multiple functions and drive delivery against a strategic plan rather than reactive demand Experience with vendor evaluation contract negotiation and ongoing vendor relationship management Ability to establish technical requirements by working backwards from security or operational outcomes not forward from available tools Demonstrated ability to coordinate across organizational boundaries with stakeholders who do not report to you Experience communicating technical direction and tradeoffs clearly to non-technical audiences

Preferred Qualifications Competencies And Experience
Familiarity with information security concepts tools or frameworks Experience in higher education or another large decentralized institutional environment Experience with identity infrastructure authentication systems or security tooling