Principal Engineer, DevSecOps
Core
Technical lead for DevSecOps program owning security tooling, policies, and automation protecting code, infrastructure, and cloud workloads in CI/CD pipelines.
Role type
Principal Engineer, DevSecOps (Technical Lead)
Builds
Production security tooling, CI/CD security gates, IaC policies, and cloud security posture management.
Domain
Information Security / DevSecOps / Cloud Infrastructure
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
CI/CD pipeline engineering, Application security, Cloud infrastructure security, Infrastructure-as-code (IaC) governance, CNAPP operations, AI security (MCP governance), Team leadership, Technical documentation
Preferred skills
GitHub Advanced Security administration, Custom Checkov policy authoring, SIEM/SOAR integration, Cloud Custodian automation, PCI-DSS/NIST/CIS compliance evidence gathering
Technologies
GitHub Actions, GitHub Advanced Security, Checkov, Terraform, AWS (Control Tower, IAM, VPC, Transit Gateway), Palo Alto Prisma/Cortex, SIEM, SOAR
Responsibilities
Lead a team of two mid-level engineers in daily execution and planning.
Responsibilities
Own and drive the DevSecOps roadmap across pipeline security, IaC policy enforcement, and cloud security.
Responsibilities
Architect and maintain security gates in GitHub Actions CI/CD pipelines.
Responsibilities
Administer GitHub Advanced Security (CodeQL, secret scanning, Dependabot) across the organization.
Responsibilities
Operate and configure CNAPP (Palo Alto Prisma/Cortex) for cloud security posture and image scanning.
Responsibilities
Define and enforce security governance for agentic AI workflows including MCP server registries and trust policies.
Seniority
Principal, hands-on IC with team leadership
