Principal DevOps Engineer

BitSight; Boston (MA); Remote; USD 126,000 - 180,000; Full time

Job summary

Bitsight is seeking a Principal DevOps Engineer to shape how we build and run our cloud platform. You will set infrastructure direction across AWS with growing GCP/Azure footprints and own platform availability, reliability, and cost visibility.

You’ll lead AI platform infra and drive data residency parity for US and EU customers. You’ll mentor DevOps and backend engineers, design modular IaC with Terraform, and ensure scalable, secure, and observable systems.

Qualifications

• 10+ years in infrastructure, SRE or DevOps roles, with at least 3 at staff or principal level setting technical direction.
• Deep AWS expertise (EKS, RDS, S3, IAM), plus working knowledge of GCP or Azure.
• Strong Terraform skills and a track record of building modules that other teams actually adopt.
• Production Kubernetes experience, including Helm, GitOps workflows and cluster lifecycle management.
• Experience owning uptime for production systems, including on-call and incident command.
• The judgement and maturity necessary to evaluate AI opportunities and to convert them into new capabilities. Monitor the results and mature our usage.
• Clear written communication. You can write an architecture proposal that a VP and a junior engineer both understand.

Responsibilities

• Own platform architecture. Make and document the infrastructure decisions that product teams build on, across AWS, with growing footprints in GCP and Azure.
• Own availability. Set SLOs for core platform services and meet them. Lead the response to major incidents and make sure post-mortem follow-ups actually ship.
• Run Kubernetes at scale. Operate EKS clusters, including capacity planning, node and pod density, graceful shutdown, and access models that give developers the access they need.
• Build reusable infrastructure as code. Write and maintain Terraform modules (RDS, S3, IAM) that product teams use directly. Retire old infrastructure repos and accounts cleanly.
• Lead AI platform infrastructure. Operate and improve our internal AI gateway (LiteLLM, Langfuse). Evaluate alternatives, onboard new models quickly, and build the cost reporting, guardrails and model-request policy around them.
• Deliver data residency. Keep US and EU environments at parity so regulated customers get the same product wherever their data lives.
• Make observability and cost visible. Design logging and metrics pipelines (OpenSearch, Sumo Logic, archival to S3) and enforce hygiene such as lifecycle policies, orphaned-resource cleanup and accurate tagging.
• Multiply others. Mentor DevOps and backend engineers, review designs, and turn repeated one-off requests into self-service tooling. Where appropriate, run POCs and prototype new solutions. Evaluate cost benefits and bring the best solutions to fruition.

Skills

Infrastructure leadership

AWS expertise (EKS, RDS, S3, IAM)

Terraform

Kubernetes (EKS)

Incident management

Architecture documentation

Written communication

Tools

Terraform

Kubernetes (EKS)

AWS (EKS/RDS/S3/IAM)

Job description

Job Title

Principal DevOps Engineer

Location

Remote in Eastern Time zone (Boston location Preferrred)

About BitSight

Bitsight is a cyber risk management leader transforming how companies manage exposure, performance, and risk for themselves and their third parties. Companies rely on Bitsight to prioritize their cybersecurity investments, build greater trust within their ecosystem, and reduce their chances of financial loss. Built on over a decade of technological innovation, its integrated solutions deliver value across enterprise security performance, digital supply chains, cyber insurance, and data analysis. We invented the cyber ratings industry in 2011. Over 3,500 customers trust Bitsight. Over 600 teammates are dispersed throughout Boston, Raleigh, New York, Lisbon, Singapore, and remote.

The Opportunity

We're looking for a Principal DevOps Engineer to shape how Bitsight builds and runs its cloud platform. You'll sit at the intersection of architecture and hands-on delivery. You'll work with stakeholders across the organization to understand the underlying business needs and set infrastructure direction, balance priorities, and agree investment. Teams across R&D will bring you their hardest platform problems, and you'll leave behind patterns they can reuse without needing you.

What You'll Do

Own platform architecture. Make and document the infrastructure decisions that product teams build on, across AWS, with growing footprints in GCP and Azure.

Own availability. Set SLOs for core platform services and meet them. Lead the response to major incidents and make sure post-mortem follow-ups actually ship.

Run Kubernetes at scale. Operate EKS clusters, including capacity planning, node and pod density, graceful shutdown, and access models that give developers the access they need.

Build reusable infrastructure as code. Write and maintain Terraform modules (RDS, S3, IAM) that product teams use directly. Retire old infrastructure repos and accounts cleanly.

Lead AI platform infrastructure. Operate and improve our internal AI gateway (LiteLLM, Langfuse). Evaluate alternatives, onboard new models quickly, and build the cost reporting, guardrails and model-request policy around them.

Deliver data residency. Keep US and EU environments at parity so regulated customers get the same product wherever their data lives.

Make observability and cost visible. Design logging and metrics pipelines (OpenSearch, Sumo Logic, archival to S3) and enforce hygiene such as lifecycle policies, orphaned-resource cleanup and accurate tagging.

Multiply others. Mentor DevOps and backend engineers, review designs, and turn repeated one-off requests into self-service tooling. Where appropriate, run POCs and prototype new solutions. Evaluate cost benefits and bring the best solutions to fruition.

What You'll Bring

10+ years in infrastructure, SRE or DevOps roles, with at least 3 at staff or principal level setting technical direction.

Deep AWS expertise (EKS, RDS, S3, IAM), plus working knowledge of GCP or Azure.

Strong Terraform skills and a track record of building modules that other teams actually adopt.

Production Kubernetes experience, including Helm, GitOps workflows and cluster lifecycle management.

Experience owning uptime for production systems, including on-call and incident command.

The judgement and maturity necessary to evaluate AI opportunities and to convert them into new capabilities. Monitor the results and mature our usage.

Clear written communication. You can write an architecture proposal that a VP and a junior engineer both understand.

Bonus Qualifications

• Experience with multi-region deployments or EU data residency requirements.


• Familiarity with Crossplane, kgateway or similar platform-engineering tools.


• Experience building internal developer platforms or CLIs.

Why Bitsight

Bitsight helps organizations understand and manage cyber risk. Our infrastructure team is small, senior and trusted. The decisions you make here will shape how dozens of engineering teams ship software and adopt AI safely.

Salary & Benefits

The anticipated hiring base salary range for this position is 126,000.00 - 180,000.00 USD Annual for US-based employees. This range reflects the minimum and maximum target for new hire salaries for the position across all US locations, is based on a full-time work schedule, and is Bitsight’s good faith estimate as of the date of this posting. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training.

In addition to base salary, this role is eligible for participation in a bonus or commission plan and an equity grant.

Bitsight also offers a competitive benefits package, including but not but limited to medical, dental, and vision insurance; paid parental leave; flexible time off; a 401(k) plan with employee and company contribution opportunities; life and disability insurance; and tuition reimbursement.

Belonging & Inclusion

Bitsight is proud to be an equal opportunity employer.

This means we do not tolerate discrimination of any kind and are committed to providing equal employment opportunities regardless of your gender identity, race, nationality, religion, sexual orientation, status as a protected veteran, or status as an individual with a disability.

Culture

We put our people first. Bitsight offers best in class benefits. We devote the same energy to nurturing our company's inclusive culture as we apply to serving our customers' needs. Working at Bitsight will give you the opportunity to fulfill your professional goals and expand your skills.

Open-Minded

If you got to this point, we hope you're feeling excited about the job description you just read. Even if you don't feel that you meet every single requirement, we still encourage you to apply. We're eager to meet people that believe in Bitsight's mission and can contribute to our team in a variety of ways.

Accommodations

Bitsight also provides reasonable accommodations to qualified individuals with disabilities or based on a sincerely held religious belief in accordance with applicable laws. If you need to inquire about a reasonable accommodation, or need assistance with completing the application process, please email [e-mail]. This contact information is for accommodation requests only, and cannot be used to inquire about the status of applications.

Additional Information for United States of America Applicants

Bitsight is committed to compliance with all fair employment practices regarding citizenship and immigration status. Bitsight will not discharge, discipline or in any other manner discriminate against any employee or applicant for employment because such employee or applicant has inquired about, discussed, or disclosed the compensation of the employee or applicant or another employee or applicant.

Massachusetts Applicants: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Qualified applicants with criminal histories will be considered for employment consistent with applicable law.

This position may be considered a promotional opportunity pursuant to the Colorado Equal Pay for Equal Work Act.

Company Overview

Bitsight is a cyber risk management leader transforming how companies manage exposure, performance, and risk for themselves and their third parties. Global enterprises, governments, and organizations rely on Bitsight to prioritize their cybersecurity investments, build greater trust within their ecosystem, and reduce their chances of financial loss. When unrelenting market pressure pushes organizations to uncertainty and caution, they turn to Bitsight to confidently navigate cyber risk and grow with confidence.

Bitsight's universally recognized risk standard and market-leading data provides actionable insights into how companies set and manage to standards and report results to internal and external stakeholders. Built on over a decade of technological innovation, Bitsight's integrated solutions deliver value across enterprise security performance, digital supply chains, cyber insurance, and data analysis.

Bitsight is on a mission to free the global economy from the material impact of cyber incidents.