Senior Professional Services Technical Architect, Security at GitLab

Role overview

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.

The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software.

Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.

As a Senior Professional Services Technical Architect, Security at GitLab, you'll lead the design and implementation of secure enterprise solutions for Professional Services clients across AMER. You'll assess complex security architectures, guide security tool and CI/CD migrations, including legacy tools such as Jenkins, and implement GitLab security capabilities to help customers meet compliance frameworks such as NIST 800-53, ISO 27001, and SOC 2. This role requires depth in secure reference architecture design across cloud security, identity management, vulnerability management, and deployment choices such as GitLab SaaS and Self-Managed, as well as the judgment to translate that depth for engineering and executive audiences.

Working closely with Professional Services Engineers, Engagement Managers, and Program Managers, you'll provide technical leadership throughout the Professional Services engagement lifecycle, from pre-sales security scoping through delivery and enablement.

GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Responsibilities

• Lead or deliver technical work for security architecture for GitLab services.
• Collaborate with product, engineering, services and customer teams.
• Improve reliability, performance, testing, automation and documentation.
• Translate requirements into maintainable software and service outcomes.

Qualifications

• Deep knowledge of GitLab security scanning capabilities, including Advanced Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Dependency Scanning, Secret Detection, and Container Scanning.
• Knowledge of security frameworks and standards, including ISO 27001, NIST 800-53, SOC 2, GDPR, and FedRAMP.
• Understanding of current security threats, including supply chain security, generative artificial intelligence (AI) and large language model (LLM) security risks, and zero-trust architecture.
• Working knowledge of the OWASP Top 10 for LLM Applications and how these risks apply to AI-assisted development tools such as GitLab Duo.
• Ability to communicate technical concepts, tradeoffs, and recommendations to technical and non-technical stakeholders.
• Ability to work independently and collaboratively in an all-remote, asynchronous environment.
• Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.

Technology in this role

• LLM: Understanding of current security threats, including supply chain security, generative artificial intelligence (AI) and large language model (LLM) security risks, and zero-trust .
• Terraform: • Hands-on experience with configuration management and infrastructure as code tooling, including Ansible and .
• Ansible: • Hands-on experience with configuration management and infrastructure as code tooling, including Ansible and .
• Jenkins: You'll assess complex security architectures, guide security tool and CI/CD migrations, including legacy tools such as Jenkins, and implement GitLab security capabilities to help customers meet compliance frameworks such as NIST 800-53, ISO 27001, and SOC .
• CI/CD: You'll assess complex security architectures, guide security tool and CI/CD migrations, including legacy tools such as Jenkins, and implement GitLab security capabilities to help customers meet compliance frameworks such as NIST 800-53, ISO 27001, and SOC .
• CAN: Our Talent Acquisition team can help answer any questions about location after starting the recruiting .
• OWASP: Working knowledge of the OWASP Top 10 for LLM Applications and how these risks apply to AI-assisted development tools such as GitLab .
• SAST: Deep knowledge of GitLab security scanning capabilities, including Advanced Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Dependency Scanning, Secret Detection, and Container .
• DAST: Deep knowledge of GitLab security scanning capabilities, including Advanced Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Dependency Scanning, Secret Detection, and Container .

Benefits

• Equity Compensation & Employee Stock Purchase Plan

About GitLab

The Platform Readiness team is part of GitLab Developer Experience, building internal developer tooling capability for platform readiness across GitLab's four deployment targets: Self-Managed, Dedicated, Dedicated for Government, and GitLab.com. We partner with platform teams, feature teams, and product management to ensure every feature is evaluated against platform readiness requirements before it ships.

Current challenges we're tackling:

Moving from manual coordination to embedded automation: Transitioning from manual, ad-hoc platform readiness assessments to automated, agentic evaluation while maintaining human oversight and trust

Building a structured, machine-readable requirements body: Evolving the platform requirements schema to capture the full scope of platform readiness concerns across all domains and platforms

Making platform readiness native to the tools feature teams already use: Enabling platform teams to contribute domain expertise and validation logic without requiring deep Platform Readiness infrastructure knowledge

Building the measurement systems to know we're working: Creating observability and evaluation frameworks that give us confidence in agentic-workflow decisions and surface failures early

Related jobs

• Corporate Security Lead, DLP and EDR — Money Forward Vietnam
• Senior Software Engineer, Code Security at GitLab — GitLab
• Staff Software Engineer, Static Analysis at GitLab — GitLab
• Lead Security Engineer, Red Team and Threat Intelligence at Grab — Grab
• Security Engineer at Deepgram — Deepgram
• Senior Security Engineer, Offensive Security at Docker — Docker