Principal Platform Engineer, Secure Build & Release

OutSystems; United States; Hybrid; USD 180,000 - 260,000; Full time

Job summary

OutSystems is seeking a Principal Platform Engineer, DevSecOps, to own the security strategy for the inner loop of our delivery pipelines. You will harden base image provenance, govern registries, and drive GitHub automation across a large engineering ecosystem.

You will stay hands-on while guiding architecture, design reviews, and cross-team initiatives, mentoring engineers and applying AI-driven approaches to release and security workflows.

Qualifications

• Security of a source-to-build platform end to end for a large engineering organization.
• Hands-on experience with GitHub organization governance and automation.
• Experience with Kubernetes and cloud platforms (Azure/AWS) at scale.
• Proficiency with CI/CD pipelines, IaC, and security tooling (SAST/DAST/SCA).
• Strong cross-team technical leadership and mentoring skills.

Responsibilities

• Own the technical strategy for inner-loop security across R&D and align stakeholders.
• Design and build base image pipelines, registry policy, GitHub automation, IaC modules, and security tooling.
• Ensure hardened image provenance and rebuild automation from known-good foundations.
• Govern registries: control what is pushed/pulled; enforce provenance within governed paths.
• Lead GitHub governance: organization-level policy, access controls, and DLP across repos.
• Integrate security into the SDLC with automated testing and secrets detection.
• Provide provenance evidence for deploy verification and automate reviews.
• Mentor engineers and lead cross-team architectural reviews.
• Apply AI/agent concepts to release and security engineering workflows.

Skills

Security engineering

GitHub workflows

Kubernetes

Terraform

CI/CD

SAST/DAST/SCA

Education

Bachelor's degree in CS or related

Tools

GitHub Actions

Kubernetes

Terraform

Chainguard/Sigstore tooling

Job description

OutSystems is seeking a Principal Platform Engineer, DevSecOps, to own the security strategy for the inner loop of our delivery pipelines. You will harden base image provenance, govern registries, and drive GitHub automation across a large engineering ecosystem.

You will stay hands-on while guiding architecture, design reviews, and cross-team initiatives, mentoring engineers and applying AI-driven approaches to release and security workflows.