Lead Site Reliability Engineer - AI SecOps

About the role

Trimble is looking for a P3 Lead AI SecOps Engineer to own the security architecture, resilience and automated compliance of its enterprise Azure infrastructure, which includes 22,000+ Windows Virtual Machines and 3,000+ Microsoft SQL Servers. The role combines Site Reliability Engineering, Zero Trust architecture and AI-driven automation, and reports directly to the Director of Engineering / Head of Cloud Security. It supports a follow-the-sun model across North America and India.

Key responsibilities

• Own the AI-driven SecOps strategy and multi-year roadmap across the Azure infrastructure, setting architecture standards and security investment priorities.
• Define and govern security architecture and exception frameworks across the Windows VM and SQL Server estate.
• Drive global third-party patch governance (NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, BigFix) with autonomous ring-based rollouts and AI-assisted troubleshooting.
• Own Azure landing zone security, Azure Policy, RBAC, WAF threat thresholds and Zero Trust adoption.
• Direct CVE analysis across Qualys, Tenable, Rapid7 and Defender, using AI agents for triage and automated fixes, and present posture metrics to executives.
• Lead DR/BCP strategies, RTO/RPO targets and compliance for ISO 27001, SOC 2 Type II, NIST CSF/800-53 and CIS Benchmarks, including security audits.
• Champion security automation with PowerShell, Python, Terraform and AI Copilots in CI/CD pipelines, and mentor global engineering teams.

Required profile

• 8+ years in cloud security, SRE or enterprise security operations at 10,000+ endpoint scale.
• Bachelor's degree in Computer Science, Information Technology or a related field (Master's preferred).
• Bonus: certifications such as AZ-500, CISSP or Security+, and experience leading global teams and speaking to C-suite stakeholders.

Required skills

• Azure, Microsoft Defender, Microsoft Sentinel, Azure Policy, WAF and the Azure Well-Architected Framework.
• Windows Server, MS SQL Server and patch tools such as NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti or BigFix.
• Vulnerability management (CVE scoring, Qualys, Tenable, Rapid7) and ISO 27001, SOC 2, NIST CSF/800-53, CIS Benchmarks.
• PowerShell, Python, GitHub, Azure DevOps and Terraform.

The position is full-time, grade P3, based in Chennai. Applications are submitted through the online application form on the posting.