Principal Software Engineer
Core
Own technical strategy for outer-loop security and supply chain integrity across R&D delivery, ensuring artifacts are verified, released, and defended before reaching production.
Role type
Principal Platform Engineer (DevSecOps)
Builds
Secure delivery pipelines, artifact attestation workflows, vulnerability management automation, and compliance evidence systems.
Domain
Enterprise Software / DevSecOps / Supply Chain Security
Required skills
Security engineering, Kubernetes, Cloud platforms (Azure/AWS), CI/CD at scale, Terraform, Python, .NET, Vulnerability management, Incident response, Supply chain integrity (signing/attestation/SBOM), Continuous compliance automation, Cross-team technical leadership, Mentoring, AI/Agents application
Preferred skills
Policy-as-code (OPA/Kyverno), Sigstore/SLSA/in-toto attestation, Multi-tenant SaaS operations, Agentic systems/AI agents
Technologies
Kubernetes, Azure, AWS, Terraform, Python, .NET, OPA, Kyverno, Sigstore, SLSA, in-toto
Responsibilities
Set technical strategy for outer-loop security and supply chain integrity; Design and build deploy-time policy, attestation verification, and security automation; Enforce supply chain integrity via artifact signing, SBOM, and provenance verification; Build security controls into the deployment path; Close the vulnerability loop end-to-end (detection, prioritization, remediation); Lead response to security and operational incidents; Automate compliance evidence generation; Lead cross-team technical initiatives and architecture reviews; Mentor engineers at all levels; Apply AI and agents to release and security workflows.
Seniority
Principal, hands-on IC with strategic leadership