Manager of DevOps
University of North Carolina at Chapel Hill
Information Technology Services’ mission is to accelerate the University’s academic and research pursuits by providing accessible, reliable, efficient, scalable and innovative technologies that enable faculty, students and staff to realize their goals of leading breakthrough change to improve society and help solve the greatest problems for our state, our nation and our global community.
The Information Security & Identity Management division manages the University’s Information Security Office and Identity Management.
The Security
Office is responsible for coordinating and ensuring that information security across the University is consistent with industry best practices and the University’s compliance obligations.
Identity
Management (IdM) identifies individuals within an enterprise or group and defines and controls the access they have to information and resources within a computer network based on their roles and circumstances.
The Information Security Office (ISO) coordinates the University’s cybersecurity program. ISO operates critical common controls, evaluates security performance and proposed changes to the program, and works continuously to improve the institution’s response to cyber risk. ISO reports on program effectiveness and direction to the Chancellor, Provost, and Board of Trustees.
Within ISO, the Security DevOps team is the default owner of security tooling across all ISO functions. The team delivers security outcomes across identity infrastructure, security data management, the unified security self-service portal, and is the owner of common controls not assigned to another ISO team. The team operates on a buy-before-build model, prioritizing integration work over custom development when feasible.
The Security
DevOps team operates as a program-advancing engineering team it defines technical requirements and implementation approach within its portfolio, drives implementation, and owns the results, operating to technical and operational standards the team sets to ensure rigor, reliability, security, and adaptability.
The Manager of Security DevOps is accountable for security technology outcomes across the entire ISO portfolio. This role sets the technical direction for the team’s portfolio and owns the operational results. The team’s priorities are set by the manager in response to the institution’s written security strategy and in consultation with the CISO.
For major security initiatives, desired outcomes, policy direction, and business process requirements are established through structured analysis led by the Analysis, Architecture, and Communications (AAC) team; the Manager of Security DevOps partners with AAC in planning the technical implementation and owns solution architecture, technical standards, and delivery. The Manager oversees the use of modern DevOps practices, focusing on sustainable, scalable, and secure practices. Careful attention is paid to automation and integration, deploying commercially available or open-source systems, reducing the number of lines of in-house code.
The buy-before-build model means vendor selection, contract negotiation, and ongoing vendor management are core responsibilities. The manager builds, manages, and develops an engineering team operating across software development, automation, operations, and user experience functions. This role requires active coordination across ISO teams and with University partners including central IT, procurement, legal, and academic units to ensure security technology decisions are well-integrated with institutional operations.
This position is a 100% remote work arrangement, consistent with System Office policy. UNC Chapel Hill employees are generally required to reside in North Carolina, within a reasonable commuting distance of their assigned duty station.
The following experience is required:
Seven or more years of experience in software development, systems engineering, or DevOps roles with demonstrated progression in responsibility. At least three years managing or leading technical teams. Experience operating in a large, complex organization with multiple stakeholders and competing priorities is required.
Demonstrated command of modern DevOps practices, including automation, CI/CD pipelines, infrastructure as code, and integration-first system design
Demonstrated experience building or operating systems with security, reliability, or compliance requirements
Demonstrated ability to manage a technology portfolio across multiple functions and drive delivery against a strategic plan rather than reactive demand
Experience with vendor evaluation, contract negotiation, and ongoing vendor relationship management
Ability to establish technical requirements by working backwards from security or operational outcomes, not forward from available tools
Demonstrated ability to coordinate across organizational boundaries with stakeholders who do not report to you
Experience communicating technical direction and tradeoffs clearly to non-technical audiences
The following experience is preferred:
Familiarity with information security concepts, tools, or frameworks
Experience in higher education or another large, decentralized institutional environment
Experience with identity infrastructure, authentication systems, or security tooling
Masters’ and 2-4 years’ experience; or Bachelors and 3-5 years’ experience; or will accept a combination of related education and experience in substitution.
Information Technology Services: http://its.unc.edu/
Interested applicants must go to the UNC-CH job search page to apply for this position:
https://unc.peopleadmin.com/postings/325932
The University of North Carolina at Chapel Hill is an equal opportunity and affirmative action employer. All qualified applicants will receive consideration for employment without regard to age, color, disability, gender, gender expression, gender identity, genetic information, national origin, race, religion, sex, sexual orientation, or status as a protected veteran.