Senior Professional Services Technical Architect - Security

Responsibilities

• Design and lead secure GitLab solution implementations for Professional Services engagements, including security risk assessments and threat modeling.
• Advise customers on GitLab SaaS, Self-Managed, and Dedicated architecture choices based on security and compliance requirements.
• Lead technical discovery of customer security, compliance, and infrastructure needs and guide implementation plans and deliverables.
• Lead migrations from legacy source code management and CI/CD tools, including Snyk, Checkmarx, Veracode, SonarQube, and GitGuardian, to GitLab CI/CD and GitLab security scanners.
• Support statements of work, sales scoping, and pre-sales planning for security engagements.
• Coordinate security implementation work across cross-functional teams and share customer needs with Product teams.
• Mentor Professional Services and partner consultants; create delivery kits, documentation, training materials, case studies, and enablement sessions.
• Partner with Training, Support, Customer Success, and Professional Services Program Managers to plan and deliver engagements.

Requirements

• Experience delivering secure enterprise architectures across application security, cloud security, secure cloud infrastructure, and DevSecOps.
• Experience migrating source code management and CI/CD platforms with security controls.
• Experience advising on GitLab SaaS, Self-Managed, and Dedicated deployment tradeoffs.
• Hands-on experience with configuration management and infrastructure-as-code tools, including Ansible and Terraform.
• Experience integrating security controls into CI/CD pipelines.
• Deep knowledge of GitLab security scanning capabilities, including SAST, DAST, Dependency Scanning, Secret Detection, and Container Scanning.
• Experience planning and executing security tool migrations, mapping findings between platforms, managing dismissed and accepted risks, and building migration validation frameworks.
• Knowledge of ISO 27001, NIST 800-53, SOC 2, GDPR, and FedRAMP.
• Understanding of supply chain security, generative AI and LLM security risks, and zero-trust architecture.
• Working knowledge of the OWASP Top 10 for LLM Applications and its application to AI-assisted development tools.
• Strong communication skills with technical and non-technical stakeholders.
• Ability to work independently and collaboratively in an all-remote, asynchronous environment.

Compensation and Benefits

• United States base salary: $164,880–$277,560 USD.
• Flexible paid time off, equity compensation and employee stock purchase plan, growth and development fund, parental leave, and team member resource groups.