Principal Engineer - DevSecOps

Principal Engineer - DevSecOps

Location : Dallas ONLY - hybrid 2-3 days per week

Overview

As a Principal DevSecOps Engineer, you will play a pivotal role in shaping our software development lifecycle by integrating security practices seamlessly into our processes. Your technical expertise and leadership will drive the implementation of robust CICD (Continuous Integration and Continuous Deployment) patterns while adhering to industry standards and policies. You'll collaborate with cross-functional teams, ensuring that our applications are secure, reliable, and efficiently deployed. Here's an overview of your responsibilities :

Duties and Responsibilities

• Design and implement secure, scalable solutions to address infrastructure and security requirements.
• Champion DevSecOps practices, integrating security seamlessly into the SDLC with tools like SAST / DAST solutions and Infrastructure as Code (IaC) scanning (e.g., Prisma Cloud, SonarQube).
• Identify and implement opportunities for pipeline automation and optimization, driving efficiency and speed.
• Embrace Infrastructure as Code (IaC) using tools like Terraform and Kubernetes to automate and manage multi-cloud deployments (e.g. : AWS, Azure).
• Lead the containerization charge, leveraging Docker and Helm 3 for efficient application packaging and deployment.
• Strong understanding of security concepts, including threat modeling, risk assessment, and vulnerability management
• Proficiency in automation tools, configuration management, and continuous integration and deployment (CI / CD) pipelines. Familiarity with tools like GitHub Actions, ArgoCD, Terraform.
• Expertise in cloud security principles, including secure architecture design and configuration management. Familiarity with popular cloud platforms like AWS, Microsoft Azure
• Implement state-of-the-art artifact management solutions for secure storage and distribution (e.g., Artifactory, Nexus.)
• Implement and maintain robust monitoring solutions (e.g., Prometheus, Grafana) to gain deep insights into application and infrastructure health.
• Integrate and leverage a SIEM tool (Splunk or similar) to collect, analyze, and correlate security-related data from various sources for advanced threat detection and incident response.
• Possess a strong understanding of web server configuration and management (e.g., Apache, Nginx) for optimal performance and security.
• Possess a strong foundation in Unix / Linux administration, including scripting (Bash), user and permission management, and system troubleshooting.
• Foster a collaborative environment, working closely with development, security, and operations teams to ensure seamless software delivery.
• Stay ahead of the curve by researching and integrating the latest DevSecOps trends and methodologies.
• Share your expertise through internal training and knowledge sharing sessions.
• Develop and maintain clear documentation for DevSecOps processes and tools, ensuring consistency and knowledge transfer.
• Troubleshoot and resolve complex issues within the CI / CD pipeline and cloud deployments.
• Keep incident tracking tools updated and document discoveries and concerns.
• Proactive approach to identify and mitigate security risks
• Champion agile methodologies within the DevSecOps workflow, ensuring continuous integration, delivery, and feedback loops.
• Align with Systems / Software Development Life Cycle (SDLC) processes and industry-standard service management principles (such as ITIL).
• Understanding cloud security principles, including secure architecture design and configuration management
• Familiarity with API Security, Container Security
• Experience with cloud technologies for cloud DevSecOps

Minimum Qualifications

Preferred Qualifications

Specialized Skills and Technologies