Job Summary:The Principal DevSecOps Engineer will help modernize and standardize software delivery across the enterprise by building secure, automated CI/CD pipelines, improving developer productivity through self-service engineering platforms, and implementing software delivery standards that can be adopted across multiple engineering teams. This role requires hands-on experience with DevSecOps, software supply chain security, CI/CD automation, and internal developer platforms. The successful candidate will work closely with engineering teams to build reusable deployment patterns, automate governance, improve software delivery metrics, and mentor developers on engineering best practices.
Key Responsibilities- Design and implement automated CI/CD pipelines with integrated security, quality, and architectural validation.
- Build and maintain immutable deployment pipelines using build-once, promote-through-environments practices.
- Develop self-service capabilities and standardized engineering templates within an internal developer portal.
- Implement software supply chain security, including SBOM generation, dependency scanning, license compliance, and artifact repository governance.
- Establish engineering standards and reusable development patterns that improve consistency across teams.
- Develop technology governance and OSS intake processes that balance security with developer productivity.
- Measure engineering effectiveness using DORA metrics and developer platform health indicators.
- Mentor engineering teams and promote adoption of modern software delivery practices.
- Build and maintain CI/CD pipelines using GitHub Actions with Copilot, GitLab CI, Jenkins, Azure DevOps, and self-hosted runners.
- Implement DevSecOps and software supply chain security practices, including SBOM, dependency scanning, license compliance, JFrog/Artifactory, OSS governance, and SAST/DAST.
- Develop and support internal developer platforms, developer portals, Golden Paths/Paved Roads, and Backstage or similar self-service platforms.
- Implement artifact management and deployment automation using immutable artifacts, build-once/promote-through-environments practices, and artifact repositories.
- Support modernization of legacy Java applications and contribute to software engineering initiatives using modern programming languages.
- Collaborate with engineering teams to improve developer experience, platform engineering capabilities, and software delivery processes.
- Perform technical mentoring and support engineering governance initiatives.
Required Qualifications- Bachelor's degree in Computer Science or a similar field of study.
- Minimum 10 years of related experience in an enterprise-level environment at a Staff or Principal level.
- Strong hands-on experience with DevSecOps and software delivery automation.
- Strong experience designing and implementing CI/CD pipelines using technologies such as GitHub Actions, GitLab CI, Jenkins, Azure DevOps, and self-hosted runners.
- Strong knowledge of software supply chain security, including SBOM generation, dependency scanning, license compliance, artifact repository governance, SAST, and DAST.
- Experience with internal developer platforms, developer portals, Golden Paths/Paved Roads, Backstage, or similar self-service platforms.
- Experience with immutable artifacts and build-once/promote-through-environments deployment practices.
- Strong coding experience with modern programming languages and familiarity with legacy Java applications.
- Strong understanding of cloud technologies, with hands-on experience in AWS and AWS Bedrock.
- Experience establishing engineering standards, reusable development patterns, and technology governance processes.
- Strong analytical, problem-solving, communication, and technical leadership skills.
- Ability to mentor engineering teams and drive adoption of modern software delivery practices.
Preferred Qualifications- Experience in Platform Engineering.
- Experience improving Developer Experience (DevEx).
- Experience with Java/EJB modernization.
- Experience providing technical mentoring to engineering teams.
- Experience with engineering governance and OSS intake processes.
