Staff Information Security Engineer- Eng (DevSecOps, Ansible, Git Hub, Automation, CI/CD Pipeline)

About the Role

UKG is seeking a highly skilled Staff Information Security Engineer to join our Identity & Access Management (IAM) organization. In this role, you will provide technical leadership in building, automating, and operating secure, scalable, and resilient IAM platforms. You will drive DevSecOps best practices across identity services, enabling secure software delivery, infrastructure automation, and cloud-native security.

As a Staff Engineer, you will collaborate closely with Security, Platform Engineering, Cloud Infrastructure, Product Engineering, and DevOps teams to improve platform reliability, accelerate deployments, and strengthen UKG's identity security capabilities through automation and engineering excellence.

Key Responsibilities

• Design, build, and maintain secure, scalable, and highly available IAM platform infrastructure.
• Lead DevSecOps initiatives by implementing CI/CD pipelines, Infrastructure as Code (IaC), and automated deployment strategies.
• Develop automation for IAM platform provisioning, configuration management, monitoring, patching, and operational workflows.
• Partner with IAM engineering teams to automate deployment and lifecycle management of identity platforms and security services.
• Design and implement cloud-native architectures supporting high availability, resiliency, and disaster recovery.
• Build reusable automation frameworks using scripting languages and infrastructure automation tools.
• Integrate security controls, secrets management, certificate management, and policy enforcement into CI/CD pipelines.
• Establish platform observability through logging, monitoring, alerting, and performance optimization.
• Lead root cause analysis for complex production issues and implement long-term reliability improvements.
• Drive engineering standards, platform modernization, and operational excellence across IAM services.
• Mentor engineers, conduct design and code reviews, and promote DevSecOps best practices throughout the organization.
• Collaborate with cross-functional teams to ensure security, compliance, and operational requirements are incorporated into engineering solutions.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 8+ years of experience in DevOps, Platform Engineering, Site Reliability Engineering (SRE), Cloud Engineering, or Security Engineering.
• Strong experience designing and supporting enterprise CI/CD platforms using tools such as GitHub Actions, Jenkins, Azure DevOps, or GitLab CI.
• Hands-on experience with Infrastructure as Code using Terraform, Ansible, or similar automation frameworks.
• Experience with container technologies including Docker and Kubernetes/OpenShift.
• Strong expertise in Linux administration and scripting using Python, Bash, or PowerShell.
• Experience with public cloud platforms, preferably AWS, Azure, or Google Cloud Platform.
• Experience implementing monitoring and observability solutions such as Prometheus, Grafana, Splunk, Datadog, or ELK.
• Working knowledge of identity and access management concepts, including authentication, authorization, RBAC, SSO, and federation.
• Experience integrating secrets management and certificate management solutions such as HashiCorp Vault, Google Secret Manager, DigiCert, or similar technologies.
• Strong understanding of DevSecOps principles, secure software delivery, and cloud security best practices.

Preferred Qualifications

• Experience supporting enterprise IAM platforms such as Saviynt, SailPoint, Ping Identity, Okta, Microsoft Entra ID, or CyberArk.
• Experience implementing Zero Trust architecture and security automation.
• Knowledge of authentication protocols including OAuth 2.0, OpenID Connect (OIDC), SAML, LDAP, and SCIM.
• Experience working in Agile environments and leading technical initiatives across distributed teams.
• Relevant certifications in AWS, Azure, Kubernetes (CKA), Terraform, HashiCorp Vault, or Security (CISSP, Security+, etc.) are highly desirable.

Technical Skills

• DevSecOps & CI/CD
• GitHub Actions, Jenkins, Azure DevOps, GitLab CI
• Terraform, Ansible
• Docker & Kubernetes/OpenShift
• AWS, Azure, Google Cloud Platform
• Python, Bash, PowerShell
• Linux Administration
• HashiCorp Vault, Google Secret Manager
• DigiCert & Certificate Lifecycle Management
• Prometheus, Grafana, Splunk, Datadog
• Git & Version Control
• OAuth 2.0, OpenID Connect (OIDC), SAML, LDAP, SCIM
• Infrastructure as Code (IaC)
• Site Reliability Engineering (SRE)

Why UKG

At UKG, our purpose is people. As a Staff Information Security Engineer, you will shape the future of our Identity & Access Management platform by driving automation, cloud transformation, and engineering excellence. You'll work alongside world-class engineers, influence enterprise-wide technical strategy, and build secure, scalable platforms that protect millions of users globally.