Principal DevSecOps Engineer

Echodyne Corp•Kirkland, WA

40d•$149,659 - $224,437

About The Position

Echodyne is seeking a Principal DevSecOps Engineer to lead the design and implementation of secure development and deployment practices across their software and systems stack. This is a high-impact, hands-on role where the individual will own the DevOps space and the stack for managing the CI/CD pipeline and help define DevSecOps strategy working with the VP of Cybersecurity, build secure pipelines, and ensure compliance with defense and commercial security standards—all while enabling rapid innovation.

Requirements

Bachelor’s degree in a related field with 10+ years of progressive DevOps/Security experience
At least 3 years operating autonomously in a Principal, Staff, or Lead architectural role
Proven track record of leading large-scale architectural migrations (specifically from on-prem CI/CD to cloud-native platforms like GitLab)
Proficiency with cloud architecture (AWS, Azure, or GCP) and Kubernetes/Docker
Deep scripting expertise (Python, Go, or Bash) to support test automation frameworks
Demonstrated ability to span both high-level software infrastructure and low-level embedded systems
Comprehensive understanding of application, infrastructure, and embedded security (OWASP Top 10)
Hands-on experience deploying advanced security tools at an enterprise scale
Exceptional ability to distill and translate complex architectural trade-offs to both highly technical engineers and executive leadership in a fast-paced, high-growth environment

Responsibilities

Define the overarching DevSecOps vision across both software and hardware-in-the-loop environments, acting as a technical mentor to foster a security-first culture across QA, software, and firmware teams
Architect highly available pipelines that integrate complex automated testing frameworks (Python, Playwright, Selenium), and spearhead the strategic migration of our legacy on-prem infrastructure (Jenkins) to a modern cloud platform (GitLab)
Design and seamlessly integrate automated security testing (SAST, DAST, SCA, fuzzing) into development workflows, proactively orchestrating vulnerability remediation, IAM, and secrets management
Establish enterprise standards for Infrastructure-as-Code (Terraform, CloudFormation) and secure supply chains (artifact signing, SBOMs), ensuring environments comply with rigorous frameworks like NIST 800-171 and CMMC
Own the infrastructure supporting all software development, test structures, and version control of software objects