Principal DevSecOps Engineer: Cloud Security & IaC Lead

Medium; Las Vegas (NV); On-site; USD 153,000 - 195,000; Full time

Job summary

Allegiant is seeking a DevSecOps Principal Engineer to lead the security tooling, automation, and governance across CI/CD pipelines and cloud workloads. You will drive security posture in production, embed threat modeling in pipelines, and coordinate across DevOps and engineering teams.

The role requires production experience in application security, pipeline engineering, cloud infrastructure, and IaC governance, plus hands-on tooling such as GitHub Advanced Security and Checkov policies.

Qualifications

• Minimum eight (8) years in information security.
• Experience leading DevSecOps teams.
• Experience shipping security tooling adopted by development teams.
• Production experience across application security, pipeline engineering, cloud infrastructure, and IaC governance.

Responsibilities

• Provide technical leadership to the DevSecOps team daily and during PI planning.
• Lead the DevSecOps team in weekly syncs to track progress and unblock blockers.
• Own GitHub Advanced Security administration and drive developer adoption of scans.
• Build, maintain, and enforce security scanning stages in GitHub Actions pipelines.
• Operate Cortex CNAPP for cloud workload protection and integration with engineering workflows.
• Manage Terraform-based security infrastructure across multi-account AWS environments.
• Document architecture decisions, policies, and runbooks; maintain documentation quality.
• Mentor two mid-level engineers and collaborate with Security Governance for PCI-DSS, NIST, CIS.
• Support acquisitions by evaluating technology stacks against security standards.

Skills

Leadership

DevSecOps

Security tooling

Pipeline engineering

Cloud infrastructure

IaC governance

AI security

Mentorship

Education

Bachelor's Degree or equivalent

CISSP (optional)

Tools

GitHub Advanced Security

CodeQL

Secret scanning (Dependabot)

Checkov / Terraform policies

Palo Alto Cortex Cloud / CNAPP

Snyk / Veracode / Checkmarx

Terraform / AWS Control Tower

Job description

Allegiant is seeking a DevSecOps Principal Engineer to lead the security tooling, automation, and governance across CI/CD pipelines and cloud workloads. You will drive security posture in production, embed threat modeling in pipelines, and coordinate across DevOps and engineering teams.

The role requires production experience in application security, pipeline engineering, cloud infrastructure, and IaC governance, plus hands-on tooling such as GitHub Advanced Security and Checkov policies.