FAST Labs Principal Software Engineer - Release Engineering & DevSecOps

BAE Systems•Merrimack, NH

1d•$118,095 - $200,762•Onsite

About The Position

Join the Cutting-Edge Research and Development Team in FAST Labs. The BAE Systems' FAST Labs team conducts research and development in areas critical to national security, including Advanced Electronics, Autonomy, Sensors & Processing, Artificial Intelligence, Electronic Warfare, and Cyber Operations & Defense. We foster a “what’s next” mentality, driving the creation of cutting-edge solutions that address the defense industry’s most pressing challenges. As a Principal Software Engineer focused on Release Engineering & DevSecOps for the R3 Product Line, you will be a key driver in ensuring the rapid, secure, and reliable delivery of our advanced software solutions.

Requirements

Active Top Secret Clearance
Bachelor's Degree in Computer Science, Computer Engineering, or a related technical field
4+ years of experience in software build engineering, release engineering, or DevOps/DevSecOps roles
Strong understanding and advocacy of DevSecOps principles
Experience with Object Oriented design, development practices, and implementation in C++11 (or later)
Experience developing for and operating in a Linux Environment
Demonstrated experience building and maintaining multi-stage CI/CD pipelines (e.g., Jenkins, GitLab CI, Azure DevOps)
Hands-on experience with Meson and CMake for C/C++ projects.
Experience with C/C++ dependency management (e.g. Conan)
Experience with creating and maintaining RPM and DEB packages including spec files and Debian control files.
Experience integrating security testing (e.g., SAST, SBOM) into the software development lifecycle
Experience with containerization technologies (Docker, Podman, Kubernetes) and orchestration
Experience with infrastructure as code (IaC) tools (e.g., Terraform, Ansible)
Experience defining and monitoring DevSecOps metrics and KPIs including DORA
Proficiency in Python for build scripting, automation, and package distribution (e.g. uv, pip)
Strong Git proficiency including branching strategies, tagging, and merge workflows

Nice To Haves

Master's Degree in Computer Science, Computer Engineering, or a related technical field
MATLAB Experience
Experience working with and testing real-time, embedded, multi-threaded, low latency systems.
Familiarity with configuration management tools (e.g., Chef, Puppet)
Experience with securing artifact repositories (e.g., Nexus, Harbor) and release management processes.
Golang build toolchain and module management experience
Experience in a DoD, government, or defense contractor environment
Familiarity with CMMI or ISO configuration management practices
Familiarity with security/compliance frameworks (e.g., NIST 800-53)
Familiarity with SBOM generation (SPDX, CycloneDX) and supply chain security practices

Responsibilities

Architect, design, build, and maintain robust CI/CD pipelines for the R3 Product Line, automating build, test, and deployment processes.
Champion and implement DevSecOps principles, integrating security scanning, vulnerability management, and compliance checks throughout the entire software development lifecycle.
Own the release cycle for multiple products or programs. Lead release planning, coordination, and execution, ensuring smooth and predictable software releases. Provide weekly release status updates and flag schedule risks early.
Utilize infrastructure-as-code practices to automate the provisioning and management of development, testing, and production environments.
Leverage containerization technologies (Docker, Kubernetes) and cloud platforms (AWS, Azure, GCP) as well as air-gapped environments to build scalable and resilient software solutions.
Implement and enforce security best practices, including vulnerability scanning and secure coding standards.
Work closely with software developers, program management, engineering management, systems engineers, and security specialists to foster a culture of collaboration and continuous improvement.
Ensure adherence to relevant security and regulatory compliance standards and maintain thorough documentation of release processes and infrastructure.
Provide troubleshooting and support for build, deployment, and operational issues.