Principal DevSecOps Engineer We are seeking a security-focused Principal DevSecOps Engineer to design, automate, and secure cloud-native platforms supporting enterprise applications and AI workloads. This role emphasizes DevSecOps practices, compliance with FedRAMP and security audit requirements, and deep expertise across AWS, Amazon EKS, GitLab CI/CD, and MLOps/AIOps. The ideal candidate will be able to support all deployment workflows and data pipeline operations across the platform.
Key Responsibilities:
Design, implement, and maintain secure AWS cloud infrastructure using OpenTofu and GitLab CI/CD.Deploy, manage, and optimize Amazon EKS clusters supporting enterprise and Generative AI workloads.
Integrate security controls into CI/CD pipelines using DevSecOps best practices, including automated vulnerability scans and compliance checks.
Build and support MLOps/AIOps platforms for AI model deployment, monitoring, and lifecycle management.
Ensure platform compliance with FedRAMP, NIST standards, internal security policies, vulnerability management processes, and audit-readiness requirements.
Collaborate across engineering teams to support deployment operations, data pipelines, and platform automation.
Required Qualifications:
5+ years of experience in Platform Engineering, DevOps, or Cloud Engineering.
Hands-on experience with AWS, Amazon EKS, Linux, GitLab CI/CD.Demonstrated experience implementing DevSecOps practices, including container security, secrets management, and vulnerability remediation.
Knowledge of FedRAMP, NIST 800-53, security compliance frameworks, and experience supporting internal/external audits.
Experience working with Generative AI, MLOps/AIOps platforms, with strong scripting and automation skills.
Preferred Skills:
Experience with security platforms including Prisma Cloud, Wiz, Aqua, Trivy, or Snyk.
Familiarity with observability and monitoring tools such as Prometheus, Grafana, CloudWatch, or Splunk.
Experience with AI/ML technologies, including LLM deployment, vector databases, and AI security best practices.
Knowledge of Zero Trust architectures, IAM, policy-as-code, and Infrastructure as Code governance.
Certifications Required: CompTIA Security+ or equivalent.
Preferred:
AWS certifications such as DevOps Engineer or Security Specialty, CISSP, or an equivalent security certification. The likely salary range for this position is $144,500 - $195,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Scheduled Weekly Hours: 40 Travel Required: Less than 10% Telecommuting Options: Remote Work Location: Any Location / Remote
