Seventy-three percent of enterprise IT job postings — cloud infrastructure, DevSecOps, and platform engineering roles — carry no salary band disclosure, per the ENTRA Job Signal Index Q2 2026 analysis of 14,800 postings across EU and US hiring markets. The EU Pay Transparency Directive's June 2026 enforcement action and the progressive US state law cycle (California SB 1162 as amended, Colorado EPEWA, New York Local Law 32) were built to close exactly this kind of gap. They are not closing it. While frontier AI lab roles have attracted the most regulatory scrutiny, the engineers who run the cloud, security, and DevOps layers underneath AI systems occupy a transparency landscape that is structurally darker — and the enforcement mechanisms now in motion are unlikely to change that before Q4 2027 at the earliest.
The asymmetry is not incidental. Enterprise IT's most consequential comp shift since the post-2023 RIF reset — the premium commanded by cloud and platform engineers who have migrated to AI/ML operations work — lives almost entirely in equity grants that no salary disclosure law can reach. The defense-adjacent cybersecurity programs employing the highest-paid cleared security architects sit behind national security carve-outs. And the contractor day-rate market, where a growing share of senior DevSecOps and cloud architecture talent has migrated, sits outside every disclosure framework by legislative design.
The DevOps-to-AI premium transparency laws cannot see
The most consequential comp shift in enterprise IT since the post-2023 RIF reset is also the least visible to salary disclosure frameworks. Cloud and platform engineers who have added AI/ML operations to their stack — model serving infrastructure, GPU cluster orchestration, vector database administration, LLMOps tooling — are earning a 35–55% premium over their non-AI-stack peers at equivalent seniority levels, per Levels.fyi crowdsourced data and ENTRA's Q2 2026 platform engineering benchmark. At AWS, a non-Bedrock L6 Senior SRE earns $265,000–$305,000 in total compensation. The equivalent role on an AWS Bedrock team — running multi-model serving infrastructure for the enterprise AI marketplace — runs $350,000–$420,000 at the same L6 band. The $85,000–$115,000 gap between those two roles at the same company, the same level, and the same job title class is real, persistent, and structurally invisible under every salary disclosure law currently in force.
The invisibility is architectural. California SB 1162, as amended by SB 642 (effective January 1, 2026), requires employers to disclose a "good faith estimate" of what they expect to pay in base salary for a position. A cloud platform engineer role at AWS Bedrock with a $340,000 P75 total compensation figure can carry a disclosed base salary range of $148,000–$235,000 that is fully compliant with SB 642 — because the $340,000 figure reflects annualized RSU grants that the statute cannot reach. When ENTRA's Job Signal Index analyzed the 27% of enterprise IT postings that do carry a salary band, the disclosed band captured on average 41% of total compensation for AI-stack platform and DevOps engineers, compared to 74% for their non-AI-stack counterparts at the same employers. The transparency law is doing its limited job. The AI-stack migration premium exists entirely in the 59% it cannot see.
The scarcity driving that premium is not easing. CrowdStrike, Palo Alto Networks, and Datadog — whose security and observability products are increasingly AI-native — are recruiting AI-adjacent platform engineering profiles against AWS Bedrock and GCP Vertex AI at comp bands that L4-L5 cloud engineers from 2023 would not recognize. Datadog's Principal SRE with AI observability specialization in New York runs $310,000–$370,000 total comp per ENTRA's August 2026 benchmark, driven by the genuine scarcity of engineers who can instrument production LLM applications at enterprise scale — tracking token cost drift, latency degradation across model versions, and retrieval quality in RAG pipelines simultaneously. The posting for that role in a Colorado EPEWA-compliant state discloses a base salary range. It does not disclose that the range covers less than half of what the successful candidate will earn.
Post-RIF context is load-bearing here. The 2023 tech-layoff cycle disproportionately hit generalist cloud and DevOps functions at the enterprise IT layer. The engineers who survived and retooled toward AI workloads — vLLM, Triton Inference Server, Ray Serve, Kubeflow Pipelines — now sit in a market with genuine scarcity at the L5-to-L7 band. The DevOps-to-AI migration premium is not a bidding-war anomaly. It is the market pricing a skills transition that most disclosure frameworks were not designed to see.
EU Directive's bite on enterprise IT employers
The EU Pay Transparency Directive's June 2026 enforcement date created a theoretical step change for Europe's largest IT employers. Companies with 250 or more employees are in scope for the full obligation stack: pre-hire salary range disclosure, individual employee pay comparator rights, and gender pay gap reporting. SAP (110,000+ employees globally, 25,000+ in Germany), Siemens Digital Industries (~75,000 globally), Bosch Tech's digital and IT division (approximately 12,000), and Accenture's EU technology delivery operations (70,000+ across France, Germany, Spain, and Ireland) are all above the threshold by orders of magnitude. None of them operate under binding EU Directive requirements as of August 2026.
The practical position is more complicated than the enforcement calendar suggests. Four member states transposed the Directive by the June 7 deadline — Slovakia, Italy, Lithuania, and Malta — accounting for fewer than 5% of EU enterprise IT job posting volume per ENTRA analysis. Germany, the largest single market for SAP and Siemens Digital's European cloud engineering workforce, has not transposed, with implementation tracking toward mid-2027 per EU infringement proceeding monitoring by Trusaic and DCI Consult (July 2026). France — home to Capgemini's 50,000-person technology services workforce — is on the same trajectory.
In the interim, the major employers have adopted anticipatory disclosure at varying rates. SAP's Q2 2026 posting audit shows 78% of EU-directed postings carrying a stated salary band, among the highest voluntary rates in the enterprise technology sector. But the bands SAP discloses for its HANA Cloud engineering roles in Germany are anchored to Tarifvertrag frameworks where applicable: collective bargaining agreements negotiated with IG Metall cover a portion of SAP's German workforce but not its cloud architects and senior DevSecOps engineers, who typically sit in non-tariff categories. For those roles, the disclosed bands average €85,000–€140,000 base — ranges that the ENTRA EU IT benchmark estimates understate median total compensation by €45,000–€70,000 once bonus targets and long-term incentive participation are included.
Accenture's posting behavior illustrates the cross-border inconsistency the Directive was designed to eliminate. Accenture's Irish-domiciled technology services postings — Ireland is tracking Q1 2027 transposition — show a 62% salary band disclosure rate per ENTRA's Q2 2026 audit. Accenture's German-entity postings show 48%. Accenture's UK postings — operating without a salary band disclosure mandate, as ERA 2025's pay equity provisions do not require pre-hire range disclosure — show 39%. The three sets of postings cover functionally identical cloud and DevOps architecture roles. The disclosure rate varies by 23 percentage points based on which legal entity the role happens to be attached to. That geography-of-opacity problem is precisely what the Directive targets — and it will not close until Germany and France complete transposition.
The Siemens Digital complication is worth naming directly. Siemens Digital Industries Software, which employs cloud architects and platform engineers across Munich, Bengaluru, and Plano, Texas, operates across three legal regimes simultaneously. Its Munich engineering center sits outside binding EU Directive requirements. Its Bengaluru cloud center — where Siemens Digital has expanded significantly since 2024 — operates under no salary band disclosure framework. Its Texas postings carry no state-mandated disclosure requirement. The same cloud architecture role at three locations produces three transparency outcomes: partial voluntary in Munich, none in Bengaluru, none in Plano. For an engineer evaluating Siemens Digital roles across those three hubs, the comp picture is constructed almost entirely from inference — Levels.fyi crowdsourced submissions, Glassdoor employer reports, and whatever peers share.
Cybersecurity's national security carve-out
The most opaque sub-segment in enterprise IT is not cloud infrastructure or DevOps — it is the intersection of AI and cybersecurity at defense-adjacent employers. Palantir, Booz Allen Hamilton, Leidos, BAE Systems Applied Intelligence, and Peraton operate cleared IT and security engineering programs where the most lucrative roles — AI threat intelligence architects, cleared Principal Cloud Security Engineers, AI-enabled SIEM platform leads — earn between $280,000 and $420,000 total compensation, with a cleared premium of 22–35% over non-cleared equivalents per ENTRA defense IT benchmark data and publicly filed H-1B Labor Condition Applications. None of that compensation is visible in salary band disclosures.
EU Directive Article 14(1) permits member states to exclude roles in the interests of national security. Colorado EPEWA carries a law enforcement and national security exemption. New York Local Law 32 has no explicit carve-out, but defense contractors with primary operations in Virginia and Maryland post the relevant roles through entities domiciled in non-disclosure states as a matter of standard practice. Palantir's Warp Speed and ICS programs at Tysons Corner, Virginia and Colorado Springs post zero salary bands for cleared AI infrastructure roles, even as Palantir's New York City civilian-side postings for equivalent-seniority cloud engineering roles carry disclosure-compliant bands. The cleared senior Principal Security Architect in Colorado Springs earning $380,000 total comp with a TS/SCI clearance premium is the most vivid case study in enterprise IT opacity that the current regulatory cycle has no mechanism to touch.
Booz Allen Hamilton's DISA and NSA contract engineering teams and Leidos's NGA platform programs operate at comparable comp levels with equivalent disclosure outcomes. The national security carve-out is not a narrow edge case. It covers precisely the roles where AI-security comp is highest and where disclosure would be most useful to engineers evaluating their market position. A senior cloud security architect who holds a TS/SCI clearance and two years of AI-enabled threat detection experience is one of the scarcest profiles in the enterprise IT market. They are also the least informed about their own market value, because the employers paying the highest cleared premiums have a legal and procedural basis to maintain the opacity.
The post-Wiz integration layer adds a dimension the market has not fully absorbed. Google's $32 billion Wiz acquisition, completed Q2 2026, absorbed one of the most technically specialized cloud security engineering organizations in the private sector into a hyperscaler with partial disclosure discipline. Wiz's pre-acquisition posting culture — which ran above 70% salary band disclosure by volume, per ENTRA tracking — has been subsumed into Google Cloud's standard California-compliant posting regime, which discloses base salary ranges that capture less than 40% of L6-equivalent total compensation at Google's current equity grant levels. The net effect for a cloud security engineer evaluating Wiz roles post-acquisition is less transparency, not more. The Wiz acquisition is a case study in how M&A can move a high-transparency employer into a lower-transparency organizational structure without any regulatory trigger.
Contractor day-rates and the two-tier problem
The salary transparency framework has a structural exemption that no regulatory cycle in 2026 or 2027 will address: it does not apply to contractors, freelancers, or self-employed consultants. EU Directive 2023/970/EU Article 1(3) explicitly limits coverage to "employees" as defined by national law, excluding self-employed persons. The UK's ERA 2025 salary band provisions apply to employers of employees; contractors operating through limited companies remain outside the framework. This creates a two-tier system with specific implications for enterprise IT, where the contractor market is large, well-organized, and absorbing a growing share of the most senior talent.
UK DevSecOps contractor rates in August 2026 run £500–£700 per day for mid-senior profiles; cloud architect rates run £650–£900 per day per ENTRA's UK contractor rate tracker Q2–Q3 2026. At £650 per day across 220 billable days, that is £143,000 annual gross — above the employee salary band for equivalent-seniority permanent roles at Accenture UK, Capgemini UK, or CGI UK, where a Senior Cloud Architect employee earns £75,000–£110,000 base. ENTRA's UK IT market analysis shows the contractor rate premium over the permanent equivalent widened from 38% in Q1 2025 to 51% in Q2 2026, driven by demand for DevSecOps and cloud architecture profiles on AI-adjacent infrastructure programs at major UK financial institutions and public sector digital services.
The arbitrage runs in one direction. Senior engineers who move from permanent employment to contracting simultaneously increase income and exit the salary band framework entirely. The contractor cohort — where the most experienced and most in-demand IT engineers increasingly concentrate — is also the cohort for whom comp visibility is lowest and information asymmetry is highest. France's portage salarial structure, covering approximately 280,000 IT and consulting workers (FEDEPS 2025 estimate), creates a parallel class: workers who are technically employees of a portage company but whose day-rate billing structure is invisible in employer pay reporting. Germany's approximately 800,000 Freiberufler IT professionals (Bundesagentur für Arbeit estimate) are similarly outside the EU Directive's forthcoming German transposition requirements.
The contractor arbitrage is not simply a comp story. It is a transparency story about who holds the information advantage. A £650-per-day DevSecOps contractor negotiating their rate has access to market data through contractor-rate surveys (ENTRA, Contractor Calculator, Kingsbridge), peer networks, and recruiter briefings that most permanent employees do not receive systematically. The permanent equivalent — the Accenture Senior Cloud Architect earning £90,000 base under a Directive-compliant disclosure regime — may have a salary band on their offer letter. That band will not tell them that a contractor doing the same work across the hall earns 59% more.
Through Q1 2027: what changes and what does not
The enforcement calendar through Q1 2027 has several fixed points that will move the enterprise IT transparency landscape — but not where opacity is most consequential.
EU infringement proceedings against non-transposing member states are underway. Germany and France are tracking toward mid-2027 transposition based on published legislative timetables and Commission enforcement pace. When Germany transposes, SAP, Siemens Digital, Bosch Tech, Deutsche Telekom's IT services division, and Capgemini Germany will enter full scope for pre-hire salary band disclosure and gender pay gap reporting in the same legislative quarter. That will generate the first German cloud architect and DevSecOps salary band dataset at scale — a genuine improvement for engineers navigating the German enterprise IT market, where the current voluntary disclosure rate sits below 50% for non-Tarifvertrag roles. The SAP HANA Cloud Principal Engineer in Munich reading Q2 2027 postings will, for the first time, have a binding right to a salary range. They will still have no right to know that the P75 total compensation for that role includes an €80,000 long-term incentive component the disclosed range does not cover.
California's second annual pay data reporting cycle closes March 31, 2027, under the SB 1162 framework as amended by SB 642. The first cycle (March 2026) established baseline gender pay gap data for California employers in IT occupational categories. The second cycle enables year-over-year tracking for the first time. Cloud and platform engineering roles — classified under BLS Standard Occupational Classification codes for "Software and Web Developers, Database and Network Administrators, and Computer Systems Analysts" — will produce the first comparable longitudinal gender pay gap dataset for enterprise IT in the US's most disclosure-advanced state. That is the Q1 2027 data point most worth watching in the US IT segment.
What will not change by Q1 2027: the contractor carve-out, the national security exemption for cleared defense IT contractors, and the equity gap that puts the AI-stack premium for platform engineers and DevSecOps specialists beyond the reach of any disclosure law currently in force. The 73% of enterprise IT postings carrying no salary band will likely decline to approximately 55–60% as US state law coverage expands — Illinois, New Jersey, and Washington state have the most active disclosure legislation in their 2026–2027 legislative pipelines — and EU Directive anticipatory compliance pressure drives large employers toward voluntary band posting. The directional movement is real.
But the engineers for whom transparency matters most — the L6 AWS Bedrock platform engineer navigating a $115,000 equity-driven pay gap, the cleared Principal Cloud Security Architect at Leidos with zero disclosure context for their cleared premium, the DevSecOps contractor in London earning 51% above their permanent equivalent outside any disclosure framework — will not be meaningfully better served by the enforcement cycle that closes with Q1 2027. The infrastructure underneath the AI shift is where the real comp action is. The real comp action is precisely where the law cannot look.
Methodology: ENTRA Job Signal Index Q2 2026 analysis of 14,800 enterprise IT job postings across EU and US markets; postings classified by disclosure status (salary range present or absent), employer segment (defense-adjacent, enterprise SaaS, systems integrator, cloud-native), and role type (cloud engineering, DevSecOps, platform engineering, cybersecurity). Compensation benchmarks from Levels.fyi crowdsourced data (August 2026), Glassdoor senior band estimates, ENTRA EU IT contractor rate tracker (Q2–Q3 2026), and publicly filed H-1B Labor Condition Applications from the US Department of Labor (H-1B dataset through Q1 2026). EU transposition status per Trusaic and DCI Consult EU transposition monitoring (July 2026) and European Commission infringement proceeding records. UK contractor rate data from the ENTRA UK IT market contractor rate survey (Q2–Q3 2026). All compensation figures represent total compensation (base + bonus + annualized equity) unless stated as base only. USD and GBP/EUR figures at spot rates as of August 2026. ENTRA EU IT benchmark estimates carry higher uncertainty than Levels.fyi crowdsourced medians for US roles; they are illustrative directional figures, not exact comp data.
Global Career PlatformFind AI talent. Find your next role.
Booking is hotels. · Airbnb is apartments. · ENTRA is global careers.