Senior DevSecOps Engineer – Secure Embedded Platform

Altentechnologyusa; Denver (CO); Hybrid; USD 125,000 - 150,000; Full time

Job summary

ALTEN Technology USA is seeking a Sr DevSecOps Engineer to own the secure architecture for embedded capital equipment platforms, including CI/CD pipelines, build infra, and security automation. You will develop Yocto-based distributions, lead threat modeling, and collaborate with Product Security and program teams to ensure regulatory and quality expectations are met.

This role centers on secure boot, firmware signing, SBOM practices, and reusable automation within a regulated, safety-critical

Qualifications

• Strong experience in embedded Linux platform development for regulated, safety-critical, or high-reliability products.
• Experience with Yocto, BSPs, OS layers, kernel configuration, boot flows, device drivers, and embedded platform security.
• Experience developing or governing DevSecOps practices in regulated environments (medical, aerospace, automotive, etc.).
• Understanding FDA cybersecurity expectations, IEC 62304, ISO 14971, ISO 13485, SBOM practices, and software lifecycle evidence generation.
• Experience implementing security automation in CI/CD pipelines (SAST, SCA, artifact signing, vulnerability reporting).
• Strong threat modeling, vulnerability assessment, and secure-by-design architecture reviews.

Responsibilities

• Define and own the DevSecOps architecture and roadmap for embedded capital equipment platforms, including CI/CD pipelines, build infrastructure, security automation, release evidence, and long-term maintainability.
• Develop and maintain secure embedded platform software, build infrastructure, and reusable automation capabilities.
• Establish secure software supply chain practices, including SBOM generation, SOUP/OTS tracking, license awareness, vulnerability monitoring, and remediation workflows.
• Develop reusable CI/CD templates and controls for static analysis, SCA, unit test automation, artifact signing, provenance tracking, and release readiness.
• Lead threat modeling and cybersecurity risk analysis for embedded platform components, including risk mitigations.
• Design and implement secure boot, firmware signing, cryptographic configuration, key lifecycle support, and authenticated update mechanisms.

Skills

DevSecOps

CI/CD

Threat modeling

Secure software

Embedded Linux

Security automation

Tools

Yocto

Snyk

SonarQube

Docker

GitHub

GitLab

Job description

ALTEN Technology USA is seeking a Sr DevSecOps Engineer to own the secure architecture for embedded capital equipment platforms, including CI/CD pipelines, build infra, and security automation. You will develop Yocto-based distributions, lead threat modeling, and collaborate with Product Security and program teams to ensure regulatory and quality expectations are met.

This role centers on secure boot, firmware signing, SBOM practices, and reusable automation within a regulated, safety-critical