Senior GRC Engineer: Automation & Compliance for Cloud

Blue Origin LLC; United States; On-site; USD 157,000 - 220,000; Full time

Benefits offered by this job

Medical, dental, vision

Paid parental leave

401(k) with company match

Education Support Program

Stock options

Paid Time Off

Job summary

Blue Origin LLC is seeking an experienced engineer to automate security governance, risk, and compliance tasks within Enterprise Technology. You will design, build, and operate automation for collecting compliance artifacts, integrating APIs, and delivering measurable controls across cloud and on-prem platforms.

The role emphasizes CI/CD, infrastructure-as-code, and drift detection, with opportunities to develop GRC dashboards and metrics to drive data-driven decisions.

Qualifications

• 7+ years building and operating production software or infrastructure automation.
• Proficiency in a general-purpose language (Python strongly preferred; Go, JavaScript/TypeScript, or similar welcome).
• Experience integrating disparate systems via REST APIs and automating data/evidence collection across cloud and SaaS platforms.
• Hands-on experience with CI/CD pipelines and infrastructure-as-code (Terraform, Bicep, or similar).
• Experience with configuration management and configuration monitoring - config-as-code and drift detection.
• Bachelor's degree or certification in a technical field, or equivalent experience.

Responsibilities

• Automating the collection of compliance artifacts and evidence across multiple cloud, SaaS, and internal platforms by integrating their APIs and normalizing the data.
• Building and operating CI/CD pipelines and Compliance-as-Code so content is version-controlled, tested, and validated automatically.
• Automating configuration management and configuration monitoring - continuously validating system and platform configurations against baselines, detecting drift, and capturing results as evidence.
• Supporting continuous monitoring by integrating security telemetry and findings into control-status reporting.
• Building GRC dashboards that integrate observability solutions to enable data-driven decisions.
• Developing outcome-driven metrics and KPIs to measure control effectiveness.

Skills

Python

REST APIs

CI/CD

Infrastructure-as-Code

Security automation

GRC experience

Education

Bachelor's degree or equivalent tech experience

Tools

GitLab CI

Terraform

Bicep

Ansible/Puppet

Job description

Blue Origin LLC is seeking an experienced engineer to automate security governance, risk, and compliance tasks within Enterprise Technology. You will design, build, and operate automation for collecting compliance artifacts, integrating APIs, and delivering measurable controls across cloud and on-prem platforms.

The role emphasizes CI/CD, infrastructure-as-code, and drift detection, with opportunities to develop GRC dashboards and metrics to drive data-driven decisions.