Senior DevSecOps Engineer - Embedded Platform Security

Linuxconfig; Denver, Northern (CO, KY); Hybrid; USD 125,000 - 150,000; Full time

Job summary

ALTEN Technology USA seeks a Sr DevSecOps Engineer to lead the architecture and roadmap for embedded capital equipment platforms. You will drive secure CI/CD pipelines, build infrastructure, and security automation across the product lifecycle.

You will develop Yocto‑based Linux distributions, implement SBOM practices, and oversee threat modeling, CVE triage, and secure boot implementations. Collaboration with multiple teams is essential to ensure compliance and security excellence.

Qualifications

• Strong experience with embedded Linux platform development for regulated, safety‑critical, or high‑reliability products.
• Hands‑on experience with AMD/Xilinx SoC‑based embedded systems including Zynq and NVIDIA ORIN.
• Experience with Yocto, BSPs, OS layers, kernel configuration and boot flows.
• Exposure to DevSecOps in regulated medical, aerospace, or automotive environments.
• Knowledge of FDA cybersecurity expectations, IEC 62304, ISO 14971 and SBOM practices.
• Experience implementing security automation in CI/CD pipelines (SAST, SCA, artifact signing).

Responsibilities

• Define and own the DevSecOps architecture and roadmap for embedded capital equipment platforms, including CI/CD pipelines, build infrastructure, security automation, release evidence, and long‑term maintainability.
• Develop and maintain secure embedded platform software, build infrastructure, and reusable automation capabilities.
• Create and support Yocto‑based embedded Linux distributions, BSP software, device drivers, hypervisors, and platform OS components.
• Establish secure software supply chain practices, including SBOM generation and vulnerability monitoring.
• Develop reusable CI/CD templates and pipeline controls for analysis, signing, provenance, and release readiness.
• Lead threat modeling and cybersecurity risk analysis for embedded components and risk mitigations.
• Drive CVE intake, enrichment, asset mapping, triage, and remediation planning with cross‑functional teams.
• Design and implement secure boot, firmware signing, cryptographic configuration, and authenticated update mechanisms.
• Define runtime security monitoring requirements and support vulnerability response workflows.
• Review anomalies and support incident response; assist regulatory submissions and audits.

Skills

Embedded Linux

DevSecOps

Threat modeling

CVE triage

CI/CD pipelines

SBOM

Secure boot

Secure update

Python

Bash

Go

Docker

Tools

Yocto

BSPs

Linux kernel

Snyk

SonarQube

GitHub

GitLab

Job description

ALTEN Technology USA seeks a Sr DevSecOps Engineer to lead the architecture and roadmap for embedded capital equipment platforms. You will drive secure CI/CD pipelines, build infrastructure, and security automation across the product lifecycle.

You will develop Yocto‑based Linux distributions, implement SBOM practices, and oversee threat modeling, CVE triage, and secure boot implementations. Collaboration with multiple teams is essential to ensure compliance and security excellence.