Principal Software Engineer

OutSystems - Software em Rede S.A.; Lisboa; On-site; EUR 120,000 - 180,000; Full time

Job summary

OutSystems is seeking a Principal Platform Engineer in DevSecOps to own the security and integrity of the outer release loop across R&D. You will set direction, balance trade-offs, and partner with engineering, product and security leadership to secure every artifact before production.

You will stay hands-on, architect deploy-time policy and attestation, drive automation, and ensure fast recovery when incidents occur.

Qualifications

• Bachelor's degree in Computer Science, Information Technology or related field.
• You have owned the security and compliance posture of a production platform end to end, at scale and under audit.
• Deep security engineering background: deploy-time policy enforcement, vulnerability management at scale, incident response, supply chain integrity (signing, attestation, SBOM) and continuous compliance automation.
• Hands-on experience with Kubernetes, a major cloud (Azure and/or AWS), CI/CD at scale, Terraform, and modern SDLC languages (Python, .NET).
• Working knowledge of SOC 2 Type 2 and FedRAMP Moderate, including how their controls apply to deployment, operations and platform governance.
• Experience with AST, CWPP or CNAPP tooling integrated into delivery pipelines.
• A track record of cross-team technical leadership and mentoring without formal management authority.
• Availability to participate in an on-call rotation for critical incidents.
• Excellent written and verbal communication, for aligning engineering, product, security and business stakeholders.

Responsibilities

• Own the technical strategy for outer-loop security and supply chain integrity across R&D delivery: set direction, make the trade-off calls, and bring engineering, product and security leadership along.
• Stay hands-on. Design and build what you architect (deploy-time policy, attestation verification, remediation workflows, security automation), own critical paths yourself, and work in the code alongside the team.
• Enforce supply chain integrity at the release boundary: artifact signing and attestation, SBOM and provenance verification, and dependency and third-party risk, so only trusted artifacts reach production.
• Build security controls into the deployment path across environments, so the pipeline stops unsafe changes before a person has to.
• Close the vulnerability loop end to end: detection, prioritization by exploitability, routing, remediation and verification, with critical and high findings fixed on time and automation wherever human judgment adds nothing.
• Lead response to security and operational incidents affecting the delivery platform, drive faster recovery, and own the long-term fixes.
• Automate compliance evidence: turn control requirements into continuous, machine-verified checks instead of audit-season effort.
• Build automated, secure delivery for build and production environments, keeping the platform secure and resilient with every release.
• Lead cross-team technical initiatives that raise engineering standards across the organization, and lead architecture and design reviews at a strategic level.
• Mentor engineers at every level, beyond your immediate team.
• Apply AI and agents to how release and security engineering work gets done.
• Write the standards others build against: deploy-time policy, platform reliability guidelines and security baselines, based on what you have implemented yourself.

Skills

Security mindset

Cross-team leadership

Mentoring

Communication

Policy enforcement

On-call readiness

Hands-on engineering

Education

Bachelor's degree in Computer Science or related field

Tools

Kubernetes

Azure

AWS

CI/CD pipelines

Terraform

Python

.NET

Job description

There are NO limits to your career: come shape the future and be part of a truly unique global culture at OutSystems!

Principal Platform Engineer, DevSecOps

Who are we? We provide the agentic systems platform that enterprise leaders trust to build and secure their applications, agents, and mission critical systems.

Release Engineering owns the pipelines, controls and release infrastructure every OutSystems release passes through, so security and availability are built into how we ship.

How can you help us? We are hiring a Principal Engineer to own the technical strategy for securing the outer loop of our delivery: how software is verified, released, run and defended once it leaves the developer's hands.

The work is concrete. Every release has to prove where its artifacts came from before it reaches production. Deploy-time controls have to stop unsafe changes without becoming the reason a release slips. When something does get through, the delivery platform has to recover fast and the fix has to last. You would own how these fit together and build a meaningful part of it yourself.

In this role you are expected to:

• Own the technical strategy for outer-loop security and supply chain integrity across R&D delivery: set direction, make the trade-off calls, and bring engineering, product and security leadership along.
• Stay hands-on. Design and build what you architect (deploy-time policy, attestation verification, remediation workflows, security automation), own critical paths yourself, and work in the code alongside the team.
• Enforce supply chain integrity at the release boundary: artifact signing and attestation, SBOM and provenance verification, and dependency and third-party risk, so only trusted artifacts reach production.
• Build security controls into the deployment path across environments, so the pipeline stops unsafe changes before a person has to.
• Close the vulnerability loop end to end: detection, prioritization by exploitability, routing, remediation and verification, with critical and high findings fixed on time and automation wherever human judgment adds nothing.
• Lead response to security and operational incidents affecting the delivery platform, drive faster recovery, and own the long-term fixes.
• Automate compliance evidence: turn control requirements into continuous, machine-verified checks instead of audit-season effort.
• Build automated, secure delivery for build and production environments, keeping the platform secure and resilient with every release.
• Lead cross-team technical initiatives that raise engineering standards across the organization, and lead architecture and design reviews at a strategic level.
• Mentor engineers at every level, beyond your immediate team.
• Apply AI and agents to how release and security engineering work gets done.
• Write the standards others build against: deploy-time policy, platform reliability guidelines and security baselines, based on what you have implemented yourself.

What you need to succeed in this job

• Bachelor's degree in Computer Science, Information Technology or a related field, or equivalent experience.
• You have owned the security and compliance posture of a production platform end to end, at scale and under audit.
• Deep security engineering background: deploy-time policy enforcement, vulnerability management at scale, incident response, supply chain integrity (signing, attestation, SBOM) and continuous compliance automation.
• Hands-on experience with Kubernetes, a major cloud (Azure and/or AWS), CI/CD at scale, Terraform, and modern SDLC languages (Python, .NET).
• Working knowledge of SOC 2 Type 2 and FedRAMP Moderate, including how their controls apply to deployment, operations and platform governance.
• Experience with AST, CWPP or CNAPP tooling integrated into delivery pipelines.
• A track record of cross-team technical leadership and mentoring without formal management authority.
• Availability to participate in an on-call rotation for critical incidents.
• Excellent written and verbal communication, for aligning engineering, product, security and business stakeholders.

Nice to have

• Familiarity with policy-as-code frameworks (OPA, Kyverno or equivalent) in production.
• Experience with Sigstore, SLSA or in-toto attestation at production scale.
• Experience operating multi-tenant SaaS under a government or regulated-sector compliance regime.
• Experience building agentic systems or AI agents applied to security or operations.

What do we have to offer you

A company that keeps growing, changing and innovating, with room for teams to be proactive and creative.

Career opportunities, including promotions and moves to other teams in the company.

Colleagues who are smart, hardworking and driven, spread across the globe.

We work to four company values: Trust, Customer Success, Innovation and Alignment.

We act as one global OutSystems team, which for this role means working as one with your counterpart in India.

To see what working in OutSystems Engineering is like, follow our day-to-day work and technical challenges on our engineering channels.

More about OutSystems

OutSystems is a leading AI Development Platform built for the enterprise. Global organizations trust OutSystems to rapidly build mission-critical apps and agents, modernize legacy processes with agentic systems, and govern their entire AI portfolio across complex regulatory environments, all on one unified platform.

While AI has opened the door to extraordinary possibilities, most large organizations find themselves stuck on one side of the "enterprise gap" because AI by itself doesn't solve their complex use cases and business challenges.

OutSystems bridges the "enterprise gap" by combining the speed of generative AI with a deterministic, enterprise-grade framework.

We provide the tools for teams of any size to deliver high-quality, reliable AI solutions that drive real business impact.

We are looking for passionate