Senior GRC Automation Engineer

Blue Origin LLC; Seattle (WA); On-site; USD 157,000 - 220,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Parental leave

401(k) match

Stock options

Paid time off

Job summary

Blue Origin LLC is seeking a cybersecurity GRC automation engineer to design, build, and operate the automation that makes compliance measurable and repeatable. You will integrate cloud, SaaS, and internal platforms using APIs, and develop dashboards for data-driven decisions.

The role emphasizes software, SRE, and DevOps practices with a focus on risk assessment, policy alignment with frameworks, and continuous monitoring. A technical degree or equivalent experience is required.

Qualifications

• Proficiency in a general-purpose programming language (Python strongly preferred; Go, JavaScript/TypeScript, or similar welcome).
• Experience integrating disparate systems via REST APIs and automating data collection across cloud/SaaS platforms.
• Hands-on experience with CI/CD pipelines and infrastructure-as-code (Terraform, Bicep).
• Ability to translate ambiguous, multi-stakeholder requirements into reliable automation.
• Familiarity with security compliance frameworks (NIST, ISO, CMMC) is a plus.

Responsibilities

• Automating collection of compliance artifacts across cloud, SaaS, and internal platforms via APIs.
• Building and operating CI/CD pipelines and Compliance-as-Code for version-controlled content.
• Automating configuration management and drift detection with baselines.

Skills

Python

Go

JavaScript/TypeScript

REST APIs

CI/CD

Terraform

Bicep

Config-as-code

Education

Bachelor's degree or equivalent

Tools

GitLab CI

Terraform

Bicep

Job description

Blue Origin LLC is seeking a cybersecurity GRC automation engineer to design, build, and operate the automation that makes compliance measurable and repeatable. You will integrate cloud, SaaS, and internal platforms using APIs, and develop dashboards for data-driven decisions.

The role emphasizes software, SRE, and DevOps practices with a focus on risk assessment, policy alignment with frameworks, and continuous monitoring. A technical degree or equivalent experience is required.