Principal DevSecOps Engineer

Compunnel, Inc.; Omaha (NE); Hybrid; USD 180,000 - 230,000; Full time

Job summary

Compunnel, Inc. is seeking a Principal DevSecOps Engineer to modernize software delivery across the enterprise. You will build secure, automated CI/CD pipelines, mentor teams, and define standard patterns for scalable engineering platforms.

You will work with GitHub Actions, GitLab CI, Jenkins, Azure DevOps, and self-hosted runners while implementing SBOM, license compliance, and artifact governance to strengthen software supply chains.

Qualifications

• Bachelor's degree in Computer Science or a related field.
• 10+ years enterprise DevSecOps/engineering leadership experience.

Responsibilities

• Design and implement automated CI/CD pipelines with integrated security and validation.
• Build immutable deployment pipelines with promote-through-environments practices.
• Develop self-service capabilities and standardized templates within an internal developer portal.
• Establish software supply chain security including SBOM, dependency scanning, license compliance, and artifact governance.
• Develop and promote engineering standards, reusable patterns, and governance processes.
• Mentor engineering teams and drive adoption of modern software delivery practices.
• Collaborate with teams to improve developer experience and platform capabilities.
• Measure engineering effectiveness using DORA metrics and platform health indicators.

Skills

DevSecOps

CI/CD pipelines

DORA metrics

Mentoring

Platform engineering

Internal developer platforms

Self-service engineering

Security governance

Cloud (AWS)

Education

Bachelor's degree in Computer Science or related field

Tools

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

Self-hosted runners

JFrog/Artifactory

Backstage

Job description

The Principal DevSecOps Engineer will help modernize and standardize software delivery across the enterprise by building secure, automated CI/CD pipelines, improving developer productivity through self-service engineering platforms, and implementing software delivery standards that can be adopted across multiple engineering teams. This role requires hands-on experience with DevSecOps, software supply chain security, CI/CD automation, and internal developer platforms. The successful candidate will work closely with engineering teams to build reusable deployment patterns, automate governance, improve software delivery metrics, and mentor developers on engineering best practices.

Key Responsibilities

• Design and implement automated CI/CD pipelines with integrated security, quality, and architectural validation.
• Build and maintain immutable deployment pipelines using build-once, promote-through-environments practices.
• Develop self-service capabilities and standardized engineering templates within an internal developer portal.
• Implement software supply chain security, including SBOM generation, dependency scanning, license compliance, and artifact repository governance.
• Establish engineering standards and reusable development patterns that improve consistency across teams.
• Develop technology governance and OSS intake processes that balance security with developer productivity.
• Measure engineering effectiveness using DORA metrics and developer platform health indicators.
• Mentor engineering teams and promote adoption of modern software delivery practices.
• Build and maintain CI/CD pipelines using GitHub Actions with Copilot, GitLab CI, Jenkins, Azure DevOps, and self-hosted runners.
• Implement DevSecOps and software supply chain security practices, including SBOM, dependency scanning, license compliance, JFrog/Artifactory, OSS governance, and SAST/DAST.
• Develop and support internal developer platforms, developer portals, Golden Paths/Paved Roads, and Backstage or similar self-service platforms.
• Implement artifact management and deployment automation using immutable artifacts, build-once/promote-through-environments practices, and artifact repositories.
• Support modernization of legacy Java applications and contribute to software engineering initiatives using modern programming languages.
• Collaborate with engineering teams to improve developer experience, platform engineering capabilities, and software delivery processes.
• Perform technical mentoring and support engineering governance initiatives.

Required Qualifications

• Bachelor's degree in Computer Science or a similar field of study.
• Minimum 10 years of related experience in an enterprise-level environment at a Staff or Principal level.
• Strong hands-on experience with DevSecOps and software delivery automation.
• Strong experience designing and implementing CI/CD pipelines using technologies such as GitHub Actions, GitLab CI, Jenkins, Azure DevOps, and self-hosted runners.
• Strong knowledge of software supply chain security, including SBOM generation, dependency scanning, license compliance, artifact repository governance, SAST, and DAST.
• Experience with internal developer platforms, developer portals, Golden Paths/Paved Roads, Backstage, or similar self-service platforms.
• Experience with immutable artifacts and build-once/promote-through-environments deployment practices.
• Strong coding experience with modern programming languages and familiarity with legacy Java applications.
• Strong understanding of cloud technologies, with hands-on experience in AWS and AWS Bedrock.
• Experience establishing engineering standards, reusable development patterns, and technology governance processes.
• Strong analytical, problem-solving, communication, and technical leadership skills.
• Ability to mentor engineering teams and drive adoption of modern software delivery practices.

Preferred Qualifications

• Experience in Platform Engineering.
• Experience improving Developer Experience (DevEx).
• Experience with Java/EJB modernization.
• Experience providing technical mentoring to engineering teams.
• Experience with engineering governance and OSS intake processes.