Principal DevSecOps Engineer

Role Overview

We are seeking a Principal DevSecOps Engineer to lead the design and implementation of secure development and deployment practices across our software and systems stack. This is a high-impact, hands-on role where you will own the DevOps space and our stack for managing the CI/CD pipeline and help define DevSecOps strategy working with our VP of Cybersecurity, build secure pipelines, and ensure compliance with defense and commercial security standards—all while enabling rapid innovation.

Responsibilities

• Strategic Leadership & Architecture: Define the overarching DevSecOps vision across both software and hardware-in-the-loop environments, acting as a technical mentor to foster a security-first culture across QA, software, and firmware teams
• CI/CD Transformation: Architect highly available pipelines that integrate complex automated testing frameworks (Python, Playwright, Selenium), and spearhead the strategic migration of our legacy on-prem infrastructure (Jenkins) to a modern cloud platform (GitLab)
• Enterprise "Shift-Left" Security: Design and seamlessly integrate automated security testing (SAST, DAST, SCA, fuzzing) into development workflows, proactively orchestrating vulnerability remediation, IAM, and secrets management
• Secure Infrastructure & Compliance: Establish enterprise standards for Infrastructure-as-Code (Terraform, CloudFormation) and secure supply chains (artifact signing, SBOMs), ensuring environments comply with rigorous frameworks like NIST 800-171 and CMMC
• Manage the CI/CD Pipeline & Infrastructure: Own the infrastructure supporting all software development, test structures, and version control of software objects

Required Skills / Experience

• Experience & Education: Bachelor’s degree in a related field with 10+ years of progressive DevOps/Security experience, including at least 3 years operating autonomously in a Principal, Staff, or Lead architectural role
• Infrastructure & Migration: Proven track record of leading large-scale architectural migrations (specifically from on-prem CI/CD to cloud-native platforms like GitLab), alongside proficiency with cloud architecture (AWS, Azure, or GCP) and Kubernetes/Docker
• Automation & Systems Thinking: Deep scripting expertise (Python, Go, or Bash) to support test automation frameworks, with a demonstrated ability to span both high-level software infrastructure and low-level embedded systems
• Security Master: Comprehensive understanding of application, infrastructure, and embedded security (OWASP Top 10), with hands-on experience deploying advanced security tools at an enterprise scale
• Strategic Communication: Exceptional ability to distill and translate complex architectural trade-offs to both highly technical engineers and executive leadership in a fast-paced, high-growth environment

What We Offer

This is an exempt role. The expected annual salary range for this role is $149,659 - $224,437 USD. If your skills generally align but not perfectly, please apply anyway. There may be another role that's a great fit for you!

• RSU (Restricted Stock Units)
• Generous Benefits:
• Fully-paid medical, dental, and vision insurance premiums for you
• Choice of PPO or HDHP/HSA
• Virtual Care – 98Point6
• Employee Assistance Program
• Mental Health coverage through Springhealth & Talkspace (Premera)
• Travel Assistance Insurance
• Company Paid Life Insurance
• Company Paid Short & Long Term Disability
• Flexible PTO (exempt) / 15 days per year (non-exempt)
• 401(k) match
• Pet Insurance
• Prepaid Legal Program
• Commuter Benefits