Staff Information Security Engineer- Eng (DevSecOps, Ansible, Git Hub, Automation, CI/CD Pipeline)

**About the Role**

UKG is seeking a highly skilled **Staff Information Security Engineer** to join our Identity & Access Management (IAM) organization. In this role, you will provide technical leadership in building, automating, and operating secure, scalable, and resilient IAM platforms. You will drive DevSecOps best practices across identity services, enabling secure software delivery, infrastructure automation, and cloud-native security.

As a Staff Engineer, you will collaborate closely with Security, Platform Engineering, Cloud Infrastructure, Product Engineering, and DevOps teams to improve platform reliability, accelerate deployments, and strengthen UKG's identity security capabilities through automation and engineering excellence.

**Key Responsibilities**

+ Design, build, and maintain secure, scalable, and highly available IAM platform infrastructure.

+ Lead DevSecOps initiatives by implementing CI/CD pipelines, Infrastructure as Code (IaC), and automated deployment strategies.

+ Develop automation for IAM platform provisioning, configuration management, monitoring, patching, and operational workflows.

+ Partner with IAM engineering teams to automate deployment and lifecycle management of identity platforms and security services.

+ Design and implement cloud-native architectures supporting high availability, resiliency, and disaster recovery.

+ Build reusable automation frameworks using scripting languages and infrastructure automation tools.

+ Integrate security controls, secrets management, certificate management, and policy enforcement into CI/CD pipelines.

+ Establish platform observability through logging, monitoring, alerting, and performance optimization.

+ Lead root cause analysis for complex production issues and implement long-term reliability improvements.

+ Drive engineering standards, platform modernization, and operational excellence across IAM services.

+ Mentor engineers, conduct design and code reviews, and promote DevSecOps best practices throughout the organization.

+ Collaborate with cross-functional teams to ensure security, compliance, and operational requirements are incorporated into engineering solutions.

**Required Qualifications**

+ Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

+ 8+ years of experience in DevOps, Platform Engineering, Site Reliability Engineering (SRE), Cloud Engineering, or Security Engineering.

+ Strong experience designing and supporting enterprise CI/CD platforms using tools such as GitHub Actions, Jenkins, Azure DevOps, or GitLab CI.

+ Hands-on experience with Infrastructure as Code using Terraform, Ansible, or similar automation frameworks.

+ Experience with container technologies including Docker and Kubernetes/OpenShift.

+ Strong expertise in Linux administration and scripting using Python, Bash, or PowerShell.

+ Experience with public cloud platforms, preferably AWS, Azure, or Google Cloud Platform.

+ Experience implementing monitoring and observability solutions such as Prometheus, Grafana, Splunk, Datadog, or ELK.

+ Working knowledge of identity and access management concepts, including authentication, authorization, RBAC, SSO, and federation.

+ Experience integrating secrets management and certificate management solutions such as HashiCorp Vault, Google Secret Manager, DigiCert, or similar technologies.

+ Strong understanding of DevSecOps principles, secure software delivery, and cloud security best practices.

**Preferred Qualifications**

+ Experience supporting enterprise IAM platforms such as Saviynt, SailPoint, Ping Identity, Okta, Microsoft Entra ID, or CyberArk.

+ Experience implementing Zero Trust architecture and security automation.

+ Knowledge of authentication protocols including OAuth 2.0, OpenID Connect (OIDC), SAML, LDAP, and SCIM.

+ Experience working in Agile environments and leading technical initiatives across distributed teams.

+ Relevant certifications in AWS, Azure, Kubernetes (CKA), Terraform, HashiCorp Vault, or Security (CISSP, Security+, etc.) are highly desirable.

**Technical Skills**

+ DevSecOps & CI/CD

+ GitHub Actions, Jenkins, Azure DevOps, GitLab CI

+ Terraform, Ansible

+ Docker & Kubernetes/OpenShift

+ AWS, Azure, Google Cloud Platform

+ Python, Bash, PowerShell

+ Linux Administration

+ HashiCorp Vault, Google Secret Manager

+ DigiCert & Certificate Lifecycle Management

+ Prometheus, Grafana, Splunk, Datadog

+ Git & Version Control

+ OAuth 2.0, OpenID Connect (OIDC), SAML, LDAP, SCIM

+ Infrastructure as Code (IaC)

+ Site Reliability Engineering (SRE)

**Why UKG**

At UKG, our purpose is people. As a Staff Information Security Engineer, you will shape the future of our Identity & Access Management platform by driving automation, cloud transformation, and engineering excellence. You'll work alongside world-class engineers, influence enterprise-wide technical strategy, and build secure, scalable platforms that protect millions of users globally.

It is the policy of Ultimate Software to promote and assure equal employment opportunity for all current and prospective Peeps without regard to race, color, religion, sex, age, disability, marital status, familial status, sexual orientation, pregnancy, genetic information, gender identity, gender expression, national origin, ancestry, citizenship status, veteran status, and any other legally protected status entitled to protection under federal, state, or local anti-discrimination laws. This policy governs all matters related to recruitment, advertising, and initial selection of employment. It shall also apply to all other aspects of employment, including, but not limited to, compensation, promotion, demotion, transfer, lay-offs, terminations, leave of absence, and training opportunities.