Principal DevSecOps Engineer

The Principal DevSecOps Engineer will serve as a senior technical leader within the DevSecOps Center of Excellence (CoE), driving automation, security, observability, and cost optimization across the enterprise. This role operates at the CoE level—establishing global standards, frameworks, reusable automation modules, and governance that enable consistent and secure software delivery at scale. This individual will act as a technical authority, mentor, and cross-functional collaborator, ensuring that DevSecOps best practices are applied across CI/CD pipelines, infrastructure-as-code (IaC), cloud security, and FinOps. The role requires strong hands-on expertise in DevSecOps tooling, a deep understanding of modern cloud-native architectures, and the ability to influence product teams through thought leadership, frameworks, and reusable solutions. Key Responsibilities Technical Leadership CoE Governance Act as the technical lead for the DevSecOps CoE , driving strategy and execution of security, automation, and observability practices. Design and maintain reusable CI/CD frameworks, IaC modules, and security guardrails for consistent adoption across all product lines. Define, document, and enforce DevSecOps standards, policies, and best practices. Mentor embedded DevSecOps engineers and provide guidance on pipeline design, automation , cost optimization and compliance. CI/CD Architecture Automation Architect and optimize CI/CD pipelines (GitHub Actions, GitLab CI, ArgoCD , Jenkins, Artifactory, Veracode) to enable frequent, secure deployments. Integrate SAST, SCA, DAST, and container scanning into delivery workflows. Establish GitOps practices using Terraform, Pulumi , or Crossplane for infrastructure provisioning. Track and drive improvements in DORA metrics (deployment frequency, lead time, MTTR, change failure rate). Security, Compliance Observability Implement “shift-left” security by embedding security testing and compliance automation into pipelines. Partner with Security and SRE teams to enforce SLIs, SLOs, and error budgets in delivery pipelines. Advance unified observability initiatives by integrating New Relic, Datadog, Prometheus, Grafana, OpenTelemetry , and CloudWatch into pipelines. Ensure compliance with HIPAA, SOC2, GDPR, and internal governance frameworks. FinOps Cost Governance Build cost-awareness into CI/CD and IaC workflows by embedding FinOps checks and cost gates. Collaborate with FinOps and Cloud teams to enforce cost tagging, rightsizing, and efficiency standards. Provide insights and automation for cloud cost optimization across AWS services (EKS, ECS, EC2, S3, RDS, containers). Cross-Functional Collaboration Partner with Engineering, Product, SRE, and Security leaders to align on standards and frameworks. Drive knowledge sharing and enablement through playbooks, templates, documentation, and internal CoP (Community of Practice) sessions. Act as the escalation point for complex DevSecOps technical challenges across teams. Qualifications Experience Required 1 5 + years in DevOps, Cloud, or Security Engineering, with expert-level technical leadership in DevSecOps . Strong expertise in CI/CD pipeline design, automation, and governance. Hands-on with CI/CD tools: GitHub Actions, GitLab CI, ArgoCD , Artifactory, Jenkins, Veracode, SonarQube. Deep experience with cloud security and AWS services (IAM, KMS, GuardDuty , Security Hub, CloudTrail). Proficiency in containers orchestration (Docker, Kubernetes, EKS, ECS). Strong hands-on with Infrastructure-as-Code and GitOps (Terraform, Pulumi , Crossplane , CloudFormation). Familiarity with observability platforms (New Relic, Datadog, Prometheus, Grafana, OpenTelemetry , CloudWatch). Programming/scripting expertise in Python, Go, C#, and shell scripting. Knowledge of DORA metrics and proven success in improving delivery performance. Practical experience with FinOps practice ... (truncated, view full listing at source)