Senior GRC Automation Engineer – Compliance as Code

Blue Origin; Washington (District of Columbia); On-site; USD 157,000 - 220,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Parental leave

Disability insurance

401(k) match

Education support

Stock options

PTO & holidays

Job summary

Blue Origin is hiring for a Cybersecurity GRC automation role in the Enterprise Technology group. You will design, build, and operate automation to make compliance measurable and repeatable across cloud and on‑prem platforms.

The role emphasizes software and platform engineering with a focus on automation, security controls, and risk assessments. WA applicants are welcome with a strong foundation in GRC and DevOps practices.

Qualifications

• 7+ years building and operating production software or infrastructure automation.
• Proficiency in Python or similar; REST API integration experience.
• Experience with CI/CD and infrastructure-as-code tools like Terraform or similar.

Responsibilities

• Automating collection of compliance artifacts across cloud, SaaS, and on‑prem platforms.
• Building and operating CI/CD pipelines and Compliance-as-Code with version control.
• Automating configuration management and drift detection against baselines.
• Supporting continuous monitoring and correlating security telemetry into reports.
• Building GRC dashboards to enable data‑driven decisions.
• Developing outcome‑driven metrics to measure control effectiveness.
• Identifying manually intensive processes and engineering them away.

Skills

Automation experience

Python (preferred)

REST APIs

CI/CD pipelines

Infrastructure as Code

Configuration management

Security frameworks

Bachelor's degree

Education

Bachelor's degree or certification

Tools

GitLab CI

Terraform

Bicep

Job description

Blue Origin is hiring for a Cybersecurity GRC automation role in the Enterprise Technology group. You will design, build, and operate automation to make compliance measurable and repeatable across cloud and on‑prem platforms.

The role emphasizes software and platform engineering with a focus on automation, security controls, and risk assessments. WA applicants are welcome with a strong foundation in GRC and DevOps practices.