Senior DevOps, Platform and Infra Security Engineer

As a Senior DevOps, Platform, and Infra Security Engineer at FICO, you will play a critical role in shaping the next generation security for FICO's Platform. This involves addressing cutting-edge security challenges in a highly automated, complex, cloud & microservices-driven environment. Your work will include designing security functionality and features for the FICO platform and the AI/ML capabilities used on top of it. Collaboration with product managers, architects, and developers to implement security controls within products will be a key aspect of your responsibilities. **Key Responsibilities:** - Secure the design of the next-generation FICO Platform, its capabilities, and services - Provide full-stack security architecture design from cloud infrastructure to application features for FICO customers - Develop and maintain Kyverno policies for enforcing security controls in Kubernetes environments - Define and implement policy-as-code best practices in collaboration with platform, DevOps, and application teams - Stay updated with emerging threats, Kubernetes security features, and cloud-native security tools - Define required controls and capabilities for the protection of FICO products and environments - Build and validate declarative threat models in a continuous and automated manner - Prepare the product for compliance attestations while ensuring adherence to best security practices **Qualifications Required:** - 10+ years of experience in architecture, security reviews, and requirement definition for complex product environments - Strong knowledge and hands-on experience with Kyverno and OPA/Gatekeeper - Familiarity with industry regulations, frameworks, and practices (e.g., PCI, ISO 27001, NIST) - Experience in threat modeling, code reviews, security testing, vulnerability detection, and remediation methods - Hands-on experience with programming languages such as Java, Python, and securing cloud environments, preferably AWS - Experience in deploying and securing containers, container orchestration, and mesh technologies (e.g., EKS, K8S, ISTIO) - Certifications in Kubernetes or cloud security (e.g., CKA, CKAD, CISSP) are desirable - Proficiency with CI/CD tools (e.g., GitHub Actions, GitLab CI, Jenkins, Crossplane) - Ability to independently drive transformational security projects across teams and organizations - Experience with securing event streaming platforms like Kafka or Pulsar - Hands-on experience with ML/AI model security, IaC (e.g., Terraform, Cloudformation, Helm), and CI/CD pipelines (e.g., Github, Jenkins, JFrog) will be beneficial Joining FICO as a Senior DevOps, Platform, and Infra Security Engineer will offer you an inclusive culture reflecting core values, opportunities for professional development, competitive compensation and benefits, and a people-first work environment promoting work/life balance and social interactions.,