Asks for

The ad says“Cloud & Security Mastery: Deep technical proficiency in Azure, Microsoft Defender, Microsoft Sentinel, Azure Policy, WAF, and the Azure Well-Architected Framework.”
The ad says“Automation & DevOps: Proficient in PowerShell, Python, GitHub, Azure DevOps, Terraform, and leveraging AI/Copilot tools for DevSecOps automation.”
The ad says“Cloud & Security Mastery: Deep technical proficiency in Azure, Microsoft Defender, Microsoft Sentinel, Azure Policy, WAF, and the Azure Well-Architected Framework.”
The ad says“Infrastructure & Patch Tooling Expertise: Hands-on experience securing Windows Server and MS SQL Server ecosystems alongside enterprise patch management platforms (Azure Update Manager, NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, or BigFix).”
The ad says“Cloud & Security Mastery: Deep technical proficiency in Azure, Microsoft Defender, Microsoft Sentinel, Azure Policy, WAF, and the Azure Well-Architected Framework.”
The ad says“Infrastructure & Patch Tooling Expertise: Hands-on experience securing Windows Server and MS SQL Server ecosystems alongside enterprise patch management platforms (Azure Update Manager, NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, or BigFix).”
The ad says“Vulnerability Management & Frameworks: Expert knowledge of CVE scoring, vulnerability scanners (Defender Vulnerability Management, Qualys, Tenable, Rapid7), and regulatory standards (ISO 27001, SOC 2 Type II, NIST CSF/800-53, CIS Benchmarks).”
The ad says“Automation & DevOps: Proficient in PowerShell, Python, GitHub, Azure DevOps, Terraform, and leveraging AI/Copilot tools for DevSecOps automation.”
The ad says“Infrastructure & Patch Tooling Expertise: Hands-on experience securing Windows Server and MS SQL Server ecosystems alongside enterprise patch management platforms (Azure Update Manager, NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, or BigFix).”
The ad says“Infrastructure & Patch Tooling Expertise: Hands-on experience securing Windows Server and MS SQL Server ecosystems alongside enterprise patch management platforms (Azure Update Manager, NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, or BigFix).”
The ad says“Cloud & Security Mastery: Deep technical proficiency in Azure, Microsoft Defender, Microsoft Sentinel, Azure Policy, WAF, and the Azure Well-Architected Framework.”
The ad says“Cloud & Security Mastery: Deep technical proficiency in Azure, Microsoft Defender, Microsoft Sentinel, Azure Policy, WAF, and the Azure Well-Architected Framework.”
The ad says“Infrastructure & Patch Tooling Expertise: Hands-on experience securing Windows Server and MS SQL Server ecosystems alongside enterprise patch management platforms (Azure Update Manager, NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, or BigFix).”
The ad says“Infrastructure & Patch Tooling Expertise: Hands-on experience securing Windows Server and MS SQL Server ecosystems alongside enterprise patch management platforms (Azure Update Manager, NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, or BigFix).”
The ad says“Infrastructure & Patch Tooling Expertise: Hands-on experience securing Windows Server and MS SQL Server ecosystems alongside enterprise patch management platforms (Azure Update Manager, NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, or BigFix).”
The ad says“Automation & DevOps: Proficient in PowerShell, Python, GitHub, Azure DevOps, Terraform, and leveraging AI/Copilot tools for DevSecOps automation.”
The ad says“Automation & DevOps: Proficient in PowerShell, Python, GitHub, Azure DevOps, Terraform, and leveraging AI/Copilot tools for DevSecOps automation.”
The ad says“Vulnerability Management & Frameworks: Expert knowledge of CVE scoring, vulnerability scanners (Defender Vulnerability Management, Qualys, Tenable, Rapid7), and regulatory standards (ISO 27001, SOC 2 Type II, NIST CSF/800-53, CIS Benchmarks).”
The ad says“Vulnerability Management & Frameworks: Expert knowledge of CVE scoring, vulnerability scanners (Defender Vulnerability Management, Qualys, Tenable, Rapid7), and regulatory standards (ISO 27001, SOC 2 Type II, NIST CSF/800-53, CIS Benchmarks).”
The ad says“Infrastructure & Patch Tooling Expertise: Hands-on experience securing Windows Server and MS SQL Server ecosystems alongside enterprise patch management platforms (Azure Update Manager, NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, or BigFix).”
The ad says“Vulnerability Management & Frameworks: Expert knowledge of CVE scoring, vulnerability scanners (Defender Vulnerability Management, Qualys, Tenable, Rapid7), and regulatory standards (ISO 27001, SOC 2 Type II, NIST CSF/800-53, CIS Benchmarks).”
The ad says“Automation & DevOps: Proficient in PowerShell, Python, GitHub, Azure DevOps, Terraform, and leveraging AI/Copilot tools for DevSecOps automation.”
The ad says“Cloud & Security Mastery: Deep technical proficiency in Azure, Microsoft Defender, Microsoft Sentinel, Azure Policy, WAF, and the Azure Well-Architected Framework.”
The ad says“Infrastructure & Patch Tooling Expertise: Hands-on experience securing Windows Server and MS SQL Server ecosystems alongside enterprise patch management platforms (Azure Update Manager, NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, or BigFix).”
The ad says“Infrastructure & Patch Tooling Expertise: Hands-on experience securing Windows Server and MS SQL Server ecosystems alongside enterprise patch management platforms (Azure Update Manager, NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, or BigFix).”

Pioneer Autonomous Security Scale as a Lead AI SecOps Engineer

Are you an experienced cloud security and SRE leader ready to own the AI-driven SecOps strategy for a massive global infrastructure? Trimble is seeking a P3 Lead AI SecOps Engineer to oversee the security architecture, resilience, and automated compliance across our enterprise Azure platform. Operating across a large-scale estate of 22,000+ Windows Virtual Machines and 3,000+ Microsoft SQL Servers, you will combine Site Reliability Engineering (SRE), Zero Trust architecture, and AI-driven automation to ensure our systems remain secure, compliant, and highly available.

About Us:

Dedicated to the world’s tomorrow, Trimble is a technology company delivering solutions that enable our customers to work in new ways to measure, build, grow and move goods for a better quality of life. Core technologies in positioning, modeling, connectivity and data analytics connect the digital and physical worlds to improve productivity, quality, safety, transparency and sustainability. From purpose-built products and enterprise lifecycle solutions to industry cloud services, Trimble is transforming critical industries such as construction, geospatial, agriculture and transportation to power an interconnected world of work. For more information about Trimble (NASDAQ: TRMB), visit: www.trimble.com

Our SecOps Ecosystem: Our Global AI Site Reliability & Security Operations (AI-SecOps) team integrates cutting-edge AI tools, autonomous patch orchestration, and DevSecOps pipelines to safeguard Trimble's enterprise infrastructure, ensuring compliance with global benchmarks while protecting global customer workflows.

What Makes This Role Great:

As a P3 Lead Engineer reporting directly to the Director of Engineering / Head of Cloud Security, you will have end-to-end strategy ownership for multi-year security roadmaps, autonomous patching frameworks, and AI-driven CVE remediation. Supporting a follow-the-sun model across North America and India, you will serve as a primary technical authority in executive forums, shape Zero Trust adoption, and mentor a high-performing global engineering team. This position offers a high-visibility platform to transform enterprise-level SecOps using modern AI and automation capabilities.

Key Exciting Responsibilities

Enterprise AI-SecOps Strategy: Own the AI-driven SecOps strategy and multi-year roadmap across our entire Azure infrastructure, setting architecture standards and defining security investment priorities.
Windows & SQL Server Infrastructure Security: Define and govern enterprise security architecture and exception frameworks across 22,000+ Windows VMs and 3,000+ SQL Servers.
Third-Party Patch Governance & AI Orchestration: Drive global third-party patch governance (across tools like NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, BigFix), defining autonomous ring-based rollouts and AI-assisted troubleshooting standards to eliminate deployment failures.
Azure Governance, WAF & Zero Trust: Own enterprise Azure landing zone security, Azure Policy frameworks, RBAC models, Web Application Firewall (WAF) threat thresholds, and Zero Trust adoption.
AI-Driven Vulnerability & CVE Remediation: Direct CVE analysis across platforms (Qualys, Tenable, Rapid7, Defender) and threat-intel feeds (NVD, MSRC), leveraging AI agents for triage and automated fix deployments while presenting posture metrics to executive leadership.
Cloud Resilience & Global Audit Compliance: Direct DR/BCP strategies, RTO/RPO targets, and compliance execution for ISO 27001, SOC 2 Type II, NIST CSF/800-53, and CIS Benchmarks, serving as the lead technical stakeholder for security audits.
Security Automation & Global Leadership: Champion security automation using PowerShell, Python, Terraform, and AI Copilots within CI/CD pipelines, while mentoring and leading cross-functional engineering teams across North America and India.

Essential Skills & Experience

Professional Experience: 8+ years of dedicated experience in cloud security, SRE, or enterprise security operations, with proven success operating at 10,000+ endpoint scale.
Cloud & Security Mastery: Deep technical proficiency in Azure, Microsoft Defender, Microsoft Sentinel, Azure Policy, WAF, and the Azure Well-Architected Framework.
Infrastructure & Patch Tooling Expertise: Hands-on experience securing Windows Server and MS SQL Server ecosystems alongside enterprise patch management platforms (Azure Update Manager, NinjaOne, SCCM/MECM, WSUS, PatchMyPC, ManageEngine, Ivanti, or BigFix).
Vulnerability Management & Frameworks: Expert knowledge of CVE scoring, vulnerability scanners (Defender Vulnerability Management, Qualys, Tenable, Rapid7), and regulatory standards (ISO 27001, SOC 2 Type II, NIST CSF/800-53, CIS Benchmarks).
Automation & DevOps: Proficient in PowerShell, Python, GitHub, Azure DevOps, Terraform, and leveraging AI/Copilot tools for DevSecOps automation.
Education: Bachelor's degree in Computer Science, Information Technology, or a related field (Master's degree preferred).

Bonus Points For:

Certifications: Microsoft AZ-500, CISSP, Security+, or equivalent enterprise security credentials.
Global Team Leadership: Track record of leading, mentoring, and growing global engineering teams across multiple regions and time zones.
Executive Communication: Experience presenting security posture metrics, risk trade-offs, and compliance progress directly to C-suite and executive stakeholders.

Logistics:

Grade / Level: P3
Department: Global AI Site Reliability & Security Operations (AI-SecOps)
Location: Chennai
Job Type: Full-Time

Why You'll Love Working With Us

At Trimble, we're not just a company that "does good"—we are a team dedicated to making a tangible, positive Real-World Impact. We build innovative solutions designed to solve the world's most critical challenges. From construction sites to transportation hubs, our work tangibly improves how people live, build, move, and grow.

You'll work on projects that truly matter: Our purpose-driven culture means you'll be helping to build and deliver solutions that make work faster, safer, and more sustainable for millions of people worldwide.
Collaborate with like-minded people: Our strong internal culture is a "hidden gem." You will work with a collaborative, supportive team that shares your purpose and fosters a genuine sense of belonging.
Be an owner: Trimble thrives on individuals who take initiative and embrace ownership. You'll find an entrepreneurial spirit where success is often "self-authored," empowering proactive "doers."
Enjoy true flexibility: We offer flexible work arrangements, which are a significant driver for employees joining and staying with us.

How to Apply: Please submit an online application for this position by clicking on the ‘Apply Now’ button located in this posting.

Join a Values-Driven Team: Belong, Grow, Innovate.

At Trimble, our core values of Belong, Grow, and Innovate aren't just words—they're the foundation of our culture. We foster an environment where you are seen, heard, and valued (Belong); where you have an opportunity to build a career and drive our collective growth (Grow); and where your innovative ideas shape the future (Innovate). We believe in empowering local teams to create impactful strategies, ensuring our global vision resonates with every individual. Become part of a team where your contributions truly matter.

Candidate Privacy Notices by Country

If you need assistance or would like to request an accommodation in connection with the application process, please contact careers@trimble.com.