Hybrid DevSecOps Engineer for Embedded & Cloud Security

Particle Measuring Systems; Niwot (CO); Hybrid; USD 95,000 - 130,000; Full time

Benefits offered by this job

Health coverage

401(k) retirement plan

Vacation and leave policies

Job summary

Particle Measuring Systems is seeking a DevSecOps Engineer in Niwot, Colorado, with a hybrid on-site schedule. You will design, implement, and manage secure cloud infrastructure, CI/CD pipelines, and compliance processes to deliver firmware and software products securely.

You will collaborate with software, firmware, and cybersecurity teams to drive security-first development, automation, and operational excellence across the release lifecycle, ensuring robust security controls.

Qualifications

• Bachelor degree in CS or related Engineering field.
• Experience as a DevSecOps or security-focused DevOps role.
• Experience integrating SAST/DAST/SCA into CI/CD pipelines.
• Familiarity with binary repositories and cloud platforms.
• Strong scripting and build-tool knowledge.

Responsibilities

• Design, implement, and maintain secure cloud environments and CI/CD pipelines.
• Promote security and compliance practices including SBOM management and threat modeling.
• Collaborate with firmware and software teams to improve secure development workflows.
• Automate provisioning of servers, containers, and infrastructure (IaC).
• Manage software artifacts and dependencies and monitor CI/CD security.

Skills

CI/CD design

Security-minded

Cross-team collaboration

Scripting (Python/Bash)

Threat modeling

Education

Bachelor of Science in Computer Science or related Engineering field

Tools

AWS

Docker

Kubernetes

GitHub Actions

Job description

Particle Measuring Systems is seeking a DevSecOps Engineer in Niwot, Colorado, with a hybrid on-site schedule. You will design, implement, and manage secure cloud infrastructure, CI/CD pipelines, and compliance processes to deliver firmware and software products securely.

You will collaborate with software, firmware, and cybersecurity teams to drive security-first development, automation, and operational excellence across the release lifecycle, ensuring robust security controls.