Senior Director, Software Engineering

Description

The company runs an AI CRM where people and agents work together on customer success, and it is in the middle of a workforce shift toward agentic AI.

This senior director role leads governance for the company's integration platform, bringing together three teams: security engineering, compliance, and production support (SWAT).

Day-to-day work stays with each team's own managers. This role sets strategy, priorities, and capacity trade-offs across the three functions.

The platform has government cloud and on-premises products. The role covers both.

Responsibilities

• Lead security engineering, compliance, and site reliability engineering for the government cloud system, so risk signals, patterns, and treatment decisions are linked across teams.
• Track improvement work for direct-report teams, including problem areas, hygiene automation, and sustainability, while team leads run daily operations.
• Set priorities and capacity trade-offs for security engineering programs: identity and access, network security, continuous monitoring, and product security.
• Act as the security officer for the government cloud system. Own its security posture, keep the System Security Plan (SSP) current, assess risk on system changes, and make sure continuous monitoring and vulnerability remediation meet FedRAMP requirements. You are the main point of accountability for authorizing officials and auditors.
• Run compliance operations across all products and regions: AUS, IA, CA, EU, JA, US, and US Gov.
• Keep 25+ certifications current across commercial, government, and industry frameworks, including SOC, PCI, HIPAA, ISO, FedRAMP, Protected B, ISMAP, IRAP, CJIS, HiTRUST, C5, and DOD/IL.
• Set the direction for cloud financial governance across AWS, Azure, and GCP: cost visibility, budget planning, and anomaly detection. Work with engineering and product leaders on annual budgets and spend accountability.
• Sponsor automated compliance tooling that cuts audit workload for engineering: evidence and artifact collection, key rotation monitoring, STIG compliance, and similar.
• Review and negotiate formal risk and compliance language for external commitments, working with engineering leaders, the company's security team, sales, and account executives.
• Manage vulnerabilities across the government cloud and on-premises products. Keep continuous monitoring running and act early on trending vulnerabilities.
• Work with the company's business information security officer to run the risk management program for the engineering organization. Maintain processes to identify, track, report, and reduce security risk.
• Set strategy and a roadmap for compliance engineering, covering certification upkeep and expansion. Build compliance requirements into products from the start, not after release.
• Create one consistent, central approach to control attestation and audit readiness. Reduce audit load on engineering teams through early preparation, evidence collection, and tracking of remediation.
• Set standards and priorities for the production support team's operations on the government cloud: change case approval and execution, on-duty coverage, and maintenance and release windows.
• Lead the move of cost and infrastructure tools toward a proactive, agent-based model that sends savings opportunities and infrastructure insights to service teams.

Conditions

Candidates may apply for no more than 3 roles within 12 months.

Benefits

• The company offers benefits and resources intended to support work-life balance.