MetLife

The Team You Will Join

The role is with the MetLife Investments Technology team.  The Investments team manages technologies across the globe for the MetLife Investment Management and MetLife Insurance Investments business lines.  We have a presence across the US, EMEA, APAC and Latin America.  The suite of applications ranges from in-house-built applications to SASS offering across all Investment asset classes.

The Opportunity 

MetLife Investments is seeking an experienced Director, DevSecOps/QA Lead to head the Investments Technology DevSecOps and Quality Engineering function. This strategic role drives secure, efficient software delivery by integrating development, security, and operations (DevSecOps) practices across our global development organization. The Director will lead a geographically dispersed team and collaborate closely with Engineering, Architecture, Cybersecurity, DevSecOps COE and Application Development teams to implement a modern, enterprise-grade DevSecOps toolchain and world-class QA automation processes. 

This Director, DevSecOps/QA Lead role is a critical leadership position that will shape the future of software delivery within Investments Technology. The ideal candidate combines technical excellence with strategic vision and strong people leadership to elevate our developer experience and drive competitive advantage through secure, innovative engineering practices. 

Key Responsibilities: 

• DevSecOps/QA Strategy & Leadership: Define and lead the DevSecOps (including QA) strategy for Investments Technology, implementing next-generation developer experiences and AI-augmented development practices to accelerate secure software delivery. Champion DevSecOps best practices and contribute to the Enterprise DevSecOps Center of Excellence to scale “shift-left” security and agile testing across the organization. 
• Secure CI/CD Pipeline & Platform Engineering: Oversee the end-to-end DevSecOps platform – including CI/CD pipelines, automated testing frameworks, and containerization standards – to ensure teams deliver high-quality, secure software releases consistently. Implement automated security scanning (SAST/DAST, dependency scanning) and vulnerability management throughout the development lifecycle and provide visibility into system health and performance across all DevSecOps services. 
• Cross-Functional Collaboration: Work closely with cross-functional stakeholders (Engineering, Architecture, DevSecOps COE, Cybersecurity, and Business Unit Tech Leads) to align DevSecOps initiatives with enterprise architecture standards and regulatory/security requirements. Influence direction-setting for Investments Technology by ensuring DevSecOps practices meet the needs of a highly regulated financial services environment (compliance, audit, risk management). 
• Toolchain & Technology Oversight: Own and continuously improve the DevSecOps toolchain and environments. Ensure effective use of a comprehensive Azure-based stack and DevSecOps tools, including GitHub Enterprise (with GitHub Advanced Security and Copilot), Azure DevOps (AzDo) with Azure KeyVault for secrets, JFrog Artifactory and JFrog Xray for artifact and OSS security management, Veracode and SonarQube for code security and quality scanning, AutoRabit for CI/CD automation, Terraform for Infrastructure-as-Code, and security tools like CyberArk, IBM QRadar, and Venafi for secrets management, key rotation and monitoring. 
• Quality Engineering & Automation: Drive continuous testing and quality assurance excellence by leveraging advanced QA automation tools and frameworks – such as SpecFlow and Tricentis Tosca for BDD and end-to-end testing, Selenium and Playwright for UI automation, Perfecto and BlazeMeter for performance testing, GenRocket for synthetic test data generation, etc. – to enable reliable, fast release cycles with high confidence in product quality. 
• Team Development & Global Leadership: Build and mentor a high-performing DevSecOps and QA team spread across multiple locations. Foster a culture of continuous learning and innovation, empowering team members with modern development practices and tools¹⁹. Set clear objectives and success metrics for the DevSecOps function (e.g. improvements in developer productivity, deployment frequency, defect reduction) and develop technical talent through coaching, training, and career development – resulting in a world-class, “DevSecOps-first” engineering organization. 

Required Skills: 

• Bachelor’s degree in computer science, Software Engineering, or related field.
• 10+ years of IT experience including 5+ years in leadership roles driving DevOps/DevSecOps or developer platform teams.
• Deep knowledge of modern software development and deployment practices – including CI/CD pipelines, version control, automated testing, and containerization (e.g. Kubernetes or Docker) – as well as cloud-native architectures and infrastructure-as-code (e.g. Terraform or similar tool).  
• Hands-on experience with the DevSecOps and, along with a strong understanding of secure coding practices, application security scanning, and compliance frameworks. DevSecOps tools, including GitHub Enterprise, is a must have. 
• Excellent communication and stakeholder management skills, with the ability to articulate complex technical concepts in simple terms to engineers, senior leadership, and non-technical partners.
• Proven ability to influence cross-functional teams and drive organizational change towards DevSecOps culture and practices. 
• Demonstrated track records of building, mentoring, and scaling high-performance engineering teams. Passion for developing technical talent and creating an inclusive, collaborative team environment that encourages innovation and continuous improvement. 

Preferred Skills: 

• Master’s degree in related field preferred.
• Experience working in a financial services or other highly regulated industry environment preferred.
• Hands on experience working with a QA tool stack.
• Relevant certifications in DevOps/DevSecOps and cloud technologies are highly desirable – for example, Azure or AWS DevOps Engineer certifications, security certifications (CISSP, CISA, etc.), or other industry-recognized credentials in agile and cloud computing.