Principal DevSecOps Engineer

Responsibilities

• Strategic Leadership & Architecture: Define the overarching DevSecOps vision across both software and hardware-in-the-loop environments, acting as a technical mentor to foster a security-first culture across QA, software, and firmware teams
• CI/CD Transformation: Architect highly available pipelines that integrate complex automated testing frameworks (Python, Playwright, Selenium), and spearhead the strategic migration of our legacy on-prem infrastructure (Jenkins) to a modern cloud platform (GitLab)
• Enterprise "Shift-Left" Security: Design and seamlessly integrate automated security testing (SAST, DAST, SCA, fuzzing) into development workflows, proactively orchestrating vulnerability remediation, IAM, and secrets management
• Secure Infrastructure & Compliance: Establish enterprise standards for Infrastructure-as-Code (Terraform, CloudFormation) and secure supply chains (artifact signing, SBOMs), ensuring environments comply with rigorous frameworks like NIST 800-171 and CMMC
• Manage the CI/CD Pipeline & Infrastructure: Own the infrastructure supporting all software development, test structures, and version control of software objects

Required Skills / Experience

• Experience & Education: Bachelor’s degree in a related field with 10+ years of progressive DevOps/Security experience, including at least 3 years operating autonomously in a Principal, Staff, or Lead architectural role
• Infrastructure & Migration: Proven track record of leading large-scale architectural migrations (specifically from on-prem CI/CD to cloud-native platforms like GitLab), alongside proficiency with cloud architecture (AWS, Azure, or GCP) and Kubernetes/Docker
• Automation & Systems Thinking: Deep scripting expertise (Python, Go, or Bash) to support test automation frameworks, with a demonstrated ability to span both high-level software infrastructure and low-level embedded systems
• Security Master: Comprehensive understanding of application, infrastructure, and embedded security (OWASP Top 10), with hands-on experience deploying advanced security tools at an enterprise scale
• Strategic Communication: Exceptional ability to distill and translate complex architectural trade-offs to both highly technical engineers and executive leadership in a fast-paced, high-growth environment

What We Offer

• This is an exempt role.
• The expected annual salary range for this role is $149,659 - $224,437 USD
• We offer competitive compensation and benefits to our full-time, US-based employees, including:
• RSU (Restricted Stock Units)
• Generous Benefits:
• Fully-paid medical, dental, and vision insurance premiums for you
• Choice of PPO or HDHP/HSA
• Virtual Care – 98Point6
• Employee Assistance Program
• Mental Health coverage through Springhealth & Talkspace (Premera)
• Travel Assistance Insurance
• Company Paid Life Insurance
• Company Paid Short & Long Term Disability
• Flexible PTO (exempt) / 15 days per year (non-exempt)
• 401(k) match
• Pet Insurance
• Prepaid Legal Program
• Commuter Benefits