• Drive adherence to FIPS, STIG, CIS benchmarks, and Secure Development Lifecycle (SDL) practices • Manage encryption tools (e.g., OpenSSL and related libraries) and ensure cryptographic compliance • Implement and maintain segmentation, secrets management, certificate lifecycle processes, and least privilege access controls • Ensure audit readiness and compliance with industry standards • Oversee generation of OS images (.iso, qcow2, container images) and maintain secure OS installer workflows • Secure CI pipelines and entitlement backend systems, ensuring integrity and compliance throughout build and deployment processes • Monitor CVEs, manage vulnerability remediation, and coordinate timely patching and fixes • Implement and maintain secure boot processes • Develop and execute security testing strategies, including regression and final build validation • Ensure security and compliance across all sites (.org, .pro, .dev) and entitlement portals