Principal DevSecOps & AI Enabled SDLC

Join BMC as a Principal, DevSecOps AI Enabled SDLC to drive enterprise-wide transformation by embedding secure, AI-powered, and automated practices across the software delivery lifecycle. This role is pivotal in translating strategy into executionstandardizing pipelines, enhancing developer productivity, and ensuring secure, compliant, and high-quality releases at scale. You will lead the adoption of AI-enabled and agentic workflows, positioning BMC at the forefront of modern software engineering innovation. Here is how, through this exciting role, YOU will contribute to BMC's and your own success: Execute enterprise DevSecOps strategy through standardized pipelines, architectures, and delivery roadmaps Build and scale secure, automated CI/CD pipelines and development workflows Drive organization-wide adoption of DevSecOps best practices and shift-left security AI Agentic SDLC Enablement Embed AI across SDLC (code quality, security analysis, testing, release validation) Implement AI-driven vulnerability prioritization and remediation Enable agentic workflows to automate SDLC and operational processes Establish governance and guardrails for responsible AI adoption Microsoft Ecosystem Leadership Leverage GitHub, GitHub Actions, Copilot, and GitHub Advanced Security Integrate Microsoft and third-party tools into standardized pipelines Align DevSecOps practices with broader cloud and workplace strategies Platform, Security Governance Implement SAST, DAST, SCA, IaC scanning, and secrets management Define governance frameworks, guardrails, and compliance mechanisms Rationalize toolsets for efficiency and scalability Metrics Continuous Improvement Track KPIs (pipeline adoption, remediation time, compliance, developer experience) Use data and AI insights to drive ongoing improvements Deliver executive-level insights and reporting Change Leadership Drive adoption through enablement, coaching, and documentation Act as a trusted advisor across Engineering, Security, and Product teams Translate technical initiatives into business outcomes To ensure youre set up for success, you will bring the following skillset experience: Deep experience in DevSecOps, CI/CD platforms, and modern SDLC practices Strong hands-on expertise with GitHub ecosystem (GitHub, Actions, Copilot, Advanced Security) Proven track record in embedding AI/automation in software delivery workflows Strong application security knowledge (OWASP, secure SDLC, supply chain security) Experience implementing shift-left security, quality gates, and policy enforcement Hands-on CI/CD tools experience (GitHub, Jenkins) Ability to operate in complex, enterprise-scale environments Strong stakeholder management, communication, and change leadership skills Whilst these are nice to have, our team can help you develop in the following skills: Experience defining enterprise DevSecOps and AI governance frameworks Exposure to regulated / audit-driven environments Knowledge of Microsoft Graph APIs for workflow automation Background in cloud-native architecture and platform engineering Experience influencing large, federated engineering organizations Advanced use of AI-assisted development and agentic workflows