Lead Site Reliability Engineer at Trimble in India - Chennai

Job description

• Pioneer Autonomous Security Scale as a Lead AI SecOps Engineer
• Are you an experienced cloud security and SRE leader ready to own the AI-driven SecOps strategy for a massive global infrastructure? Trimble is seeking a P3 Lead AI SecOps Engineer to oversee the security architecture, resilience, and automated compliance across our enterprise Azure platform. Operating across a large-scale estate of 22,000+ Windows Virtual Machines and 3,000+ Microsoft SQL Servers, you will combine Site Reliability Engineering (SRE), Zero Trust architecture, and AI-driven automation to ensure our systems remain secure, compliant, and highly available.
• As a P3 Lead Engineer reporting directly to the Director of Engineering / Head of Cloud Security, you will have end-to-end strategy ownership for multi-year security roadmaps, autonomous patching frameworks, and AI-driven CVE remediation. Supporting a follow-the-sun model across North America and India, you will serve as a primary technical authority in executive forums, shape Zero Trust adoption, and mentor a high-performing global engineering team. This position offers a high-visibility platform to transform enterprise-level SecOps using modern AI and automation capabilities.

Responsibilities

• Enterprise AI-SecOps Strategy: Own the AI-driven SecOps strategy and multi-year roadmap across our entire Azure infrastructure, setting architecture standards and defining security investment priorities.
• Windows & SQL Server Infrastructure Security: Define and govern enterprise security architecture and exception frameworks across 22,000+ Windows VMs and 3,000+ SQL Servers.
• Third-Party Patch Governance & AI Orchestration: Drive global third-party patch governance (across tools like NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, BigFix), defining autonomous ring-based rollouts and AI-assisted troubleshooting standards to eliminate deployment failures.
• Azure Governance, WAF & Zero Trust: Own enterprise Azure landing zone security, Azure Policy frameworks, RBAC models, Web Application Firewall (WAF) threat thresholds, and Zero Trust adoption.
• AI-Driven Vulnerability & CVE Remediation: Direct CVE analysis across platforms (Qualys, Tenable, Rapid7, Defender) and threat-intel feeds (NVD, MSRC), leveraging AI agents for triage and automated fix deployments while presenting posture metrics to executive leadership.
• Cloud Resilience & Global Audit Compliance: Direct DR/BCP strategies, RTO/RPO targets, and compliance execution for ISO 27001, SOC 2 Type II, NIST CSF/800-53, and CIS Benchmarks, serving as the lead technical stakeholder for security audits.
• Security Automation & Global Leadership: Champion security automation using PowerShell, Python, Terraform, and AI Copilots within CI/CD pipelines, while mentoring and leading cross-functional engineering teams across North America and India.

Requirements

• Professional Experience: 8+ years of dedicated experience in cloud security, SRE, or enterprise security operations, with proven success operating at 10,000+ endpoint scale.
• Cloud & Security Mastery: Deep technical proficiency in Azure, Microsoft Defender, Microsoft Sentinel, Azure Policy, WAF, and the Azure Well-Architected Framework.
• Infrastructure & Patch Tooling Expertise: Hands-on experience securing Windows Server and MS SQL Server ecosystems alongside enterprise patch management platforms (Azure Update Manager, NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, or BigFix).
• Vulnerability Management & Frameworks: Expert knowledge of CVE scoring, vulnerability scanners (Defender Vulnerability Management, Qualys, Tenable, Rapid7), and regulatory standards (ISO 27001, SOC 2 Type II, NIST CSF/800-53, CIS Benchmarks).
• Automation & DevOps: Proficient in PowerShell, Python, GitHub, Azure DevOps, Terraform, and leveraging AI/Copilot tools for DevSecOps automation.
• Education: Bachelor's degree in Computer Science, Information Technology, or a related field (Master's degree preferred).
• Certifications: Microsoft AZ-500, CISSP, Security+, or equivalent enterprise security credentials.
• Global Team Leadership: Track record of leading, mentoring, and growing global engineering teams across multiple regions and time zones.
• Executive Communication: Experience presenting security posture metrics, risk trade-offs, and compliance progress directly to C-suite and executive stakeholders.

Skills

Required

• Azure
• Microsoft Defender
• Microsoft Sentinel
• Azure Policy
• WAF
• Azure Well-Architected Framework
• Windows Server
• MS SQL Server
• Azure Update Manager
• NinjaOne
• SCCM/MECM
• WSUS

Preferred

• Microsoft AZ-500
• CISSP
• Security+

Benefits

• At Trimble, we're not just a company that "does good"—we are a team dedicated to making a tangible, positive Real-World Impact. We build innovative solutions designed to solve the world's most critical challenges. From construction sites to transportation hubs, our work tangibly improves how people live, build, move, and grow.
• You'll work on projects that truly matter: Our purpose-driven culture means you'll be helping to build and deliver solutions that make work faster, safer, and more sustainable for millions of people worldwide.
• Collaborate with like-minded people: Our strong internal culture is a "hidden gem." You will work with a collaborative, supportive team that shares your purpose and fosters a genuine sense of belonging.
• Be an owner: Trimble thrives on individuals who take initiative and embrace ownership. You'll find an entrepreneurial spirit where success is often "self-authored," empowering proactive "doers."
• Enjoy true flexibility: We offer flexible work arrangements, which are a significant driver for employees joining and staying with us.