LogoFresh Jobs Ahead
Paylocity
Paylocity
5,001 – 10,000 Employees
B2BHR TechSaaS
Paylocity develops cloud-based payroll and human capital management software for organizations ranging from small businesses to enterprises. Its SaaS platform brings together payroll, HR, time and labor management, benefits administration, recruiting, onboarding, performance, learning, employee experience, and AI-enabled tools. Paylocity also works with accountants, brokers, and technology partners, supporting the broader business operations and workforce-management ecosystem.
LinkedIn
Company Jobs

DevSecOps Manager at Paylocity (U.S. Remote)

Lead secure software engineering for Paylocity’s cloud HR and payroll platform. Shape application security, resilient CI/CD workflows, and trusted software supply chains.

USUnited States
$131,000 – $187,000 / year
RemoteFull-timeMiddleSeniorEnglish RequiredDevOps Engineer
Cloud

Description

  • Lead and coach the DevSecOps team.
  • Set the strategy for application security and software supply chain security.
  • Promote secure-by-design engineering through threat modeling, architecture and design reviews, reusable security patterns, and practical guidance for developers.
  • Standardize trusted, minimal container images and secure base components, adopting technologies such as Chainguard where appropriate.
  • Build software provenance and artifact integrity controls, including SBOMs, signing, attestations, and verification across build and deployment workflows.
  • Integrate automated security checks and policy safeguards into CI/CD and developer workflows.
  • Harden GitHub Actions across the organization with reusable workflows, least-privilege access, trusted dependencies, and secure authentication.
  • Work with engineering and platform teams to reduce exploitable vulnerabilities and supply chain exposure.
  • Set measures for secure development adoption, supply chain integrity, vulnerability reduction, and control effectiveness.
  • Assess emerging application security and software supply chain technologies.
  • Turn security strategy into scalable engineering results.
  • Use a computer and phone and type while seated for extended periods.

Requirements

  • At least five years of experience in application security, DevSecOps, product security, software security, or a related information security field.
  • At least two years of people management experience.
  • Experience leading technical teams or security engineering initiatives.
  • Strong understanding of secure software development, secure-by-design practices, threat modeling, risk-based vulnerability management, and the NIST Secure Software Development Framework (SSDF).
  • Hands-on experience adding security controls to CI/CD pipelines and modern software delivery workflows.
  • Experience securing GitHub Actions at scale is preferred.
  • Demonstrated experience leading change initiatives involving software delivery, CI/CD platforms, developer workflows, or security controls.
  • Experience with software supply chain security, including hardened container images, SBOMs, artifact signing, attestations, provenance, and dependency risk.
  • Working knowledge of application security testing and automation, including SAST, SCA, secrets detection, and related tools.
  • Experience in cloud, SaaS, containerized, and agile or DevOps engineering environments.
  • Strong communication and leadership skills.
  • Ability to sit at a desk or workstation for 7–8 hours per day.
  • Ability to use computer and phone systems and type.
  • Availability five days per week during designated work hours is required.
  • Must work within the United States.

Benefits

  • Medical insurance
  • Dental insurance
  • Vision insurance
  • Life insurance
  • Disability insurance
  • 401(k) matching
  • Career development opportunities
  • Annual bonus
  • Restricted stock unit grant based on individual performance
  • Comprehensive benefits package
  • Fully remote work from home or from the employee’s U.S. location of record

Related Jobs