Principal Software Engineer

Overview

Principal Platform Engineer, DevSecOps on the Release Engineering team, owning the technical strategy for securing the inner loop of delivery: the images, repositories, registries and developer workflows that every build starts from.

What you'll do

• Own the technical strategy for inner-loop security across R&D: set direction, make trade-off calls, and bring engineering, product and security leadership along.
• Stay hands-on: design and build base image pipelines, registry policy, GitHub automation, IaC modules and security tooling, owning critical paths and working in the code alongside the team.
• Own base image supply: hardened image provenance, lifecycle and rebuild automation, so every build starts from a known-good foundation.
• Govern the registries: what can be pushed, pulled and promoted, by whom, and with what provenance.
• Own GitHub governance: organization-level policy, access and DLP controls, repository standards, and automation that keeps hundreds of repositories compliant without slowing engineers down.
• Build security into the SDLC from the start: automated SAST, DAST, SCA and secrets detection in developer workflows, tuned to keep false positives low.
• Produce the provenance and evidence the release path depends on, so verification at deploy time is automatic.
• Lead cross-team technical initiatives that raise engineering standards, and lead architecture and design reviews at a strategic level.
• Mentor engineers at every level, beyond your immediate team.
• Apply AI and agents to how release and security engineering work gets done.
• Write the standards others build against: security baselines, IaC patterns, repository and image standards.

What you'll need

• Bachelor's degree in Computer Science, Information Technology or a related field, or equivalent experience.
• Have owned the security of a source-to-build platform (repositories, images, registries, developer tooling) end to end, at scale, for a large engineering organization.
• Deep security engineering background: software supply chain security at the source (hardened images, registry governance, provenance), SDLC security gating, secrets management and source control governance.
• Hands-on experience with GitHub at organization scale: policies, GitHub Actions, GitHub Advanced Security or equivalent, and API-driven automation.
• Hands-on experience with Kubernetes and container tooling, a major cloud (Azure and/or AWS), CI/CD at scale, Terraform, and modern SDLC languages (Python, .NET).
• Working knowledge of SOC 2 Type 2 and FedRAMP Moderate, including how their controls apply to source control and build integrity.
• Track record of cross-team technical leadership and mentoring without formal management authority.
• Working hours with meaningful overlap with European teams, and willingness to work across time zones.
• Fluency in English, written and spoken, and excellent communication skills.

Nice to have

• Familiarity with hardened base image distributions (such as Chainguard), SLSA, Sigstore or SBOM tooling in production.
• Experience building agentic systems or AI agents applied to developer workflows.
• Experience in platform engineering or developer experience for large engineering organizations.

Details

• Location: Bangalore, India.
• Working hours with meaningful overlap with European teams; works as one global team with the counterpart in Portugal.