Principal Platform Engineer, DevSecOps
There are NO limits to your career: come shape the future and be part of a truly unique global culture at OutSystems!
Who are we?
We provide the agentic systems platform that enterprise leaders trust to build and secure their applications, agents, and mission critical systems. Release Engineering owns the pipelines, controls and release infrastructure every OutSystems release passes through, so security and availability are built into how we ship.
How can you help us?
We are hiring a Principal Engineer to own the technical strategy for securing the outer loop of our delivery: how software is verified, released, run and defended once it leaves the developer's hands. The work is concrete. Every release has to prove where its artifacts came from before it reaches production. Deploy-time controls have to stop unsafe changes without becoming the reason a release slips. When something does get through, the delivery platform has to recover fast and the fix has to last. You would own how these fit together and build a meaningful part of it yourself.
Задачи
•Own the technical strategy for outer-loop security and supply chain integrity across R&D delivery: set direction, make the trade-off calls, and bring engineering, product and security leadership along.
•Stay hands-on. Design and build what you architect (deploy-time policy, attestation verification, remediation workflows, security automation), own critical paths yourself, and work in the code alongside the team.
•Enforce supply chain integrity at the release boundary: artifact signing and attestation, SBOM and provenance verification, and dependency and third-party risk, so only trusted artifacts reach production.
•Build security controls into the deployment path across environments, so the pipeline stops unsafe changes before a person has to.
•Close the vulnerability loop end to end: detection, prioritization by exploitability, routing, remediation and verification, with critical and high findings fixed on time and automation wherever human judgment adds nothing.
•Lead response to security and operational incidents affecting the delivery platform, drive faster recovery, and own the long-term fixes.
•Automate compliance evidence: turn control requirements into continuous, machine-verified checks instead of audit-season effort.
•Build automated, secure delivery for build and production environments, keeping the platform secure and resilient with every release.
•Lead cross-team technical initiatives that raise engineering standards across the organization, and lead architecture and design reviews at a strategic level.
•Mentor engineers at every level, beyond your immediate team.
•Apply AI and agents to how release and security engineering work gets done.
•Write the standards others build against: deploy-time policy, platform reliability guidelines and security baselines, based on what you have implemented yourself.
Требования
•Bachelor's degree in Computer Science, Information Technology or a related field, or equivalent experience.
•You have owned the security and compliance posture of a production platform end to end, at scale and under audit.
•Deep security engineering background: deploy-time policy enforcement, vulnerability management at scale, incident response, supply chain integrity (signing, attestation, SBOM) and continuous compliance automation.
•Hands-on experience with Kubernetes, a major cloud (Azure and/or AWS), CI/CD at scale, Terraform, and modern SDLC languages (Python, .NET).
•Working knowledge of SOC 2 Type 2 and FedRAMP Moderate, including how their controls apply to deployment, operations and platform governance.
•Experience with AST, CWPP or CNAPP tooling integrated into delivery pipelines.
•A track record of cross-team technical leadership and mentoring without formal management authority.
•Availability to participate in an on-call rotation for critical incidents.
•Excellent written and verbal communication, for aligning engineering, product, security and business stakeholders.
•Familiarity with policy-as-code frameworks (OPA, Kyverno or equivalent) in production.
•Experience with Sigstore, SLSA or in-toto attestation at production scale.
•Experience operating multi-tenant SaaS under a government or regulated-sector compliance regime.
•Experience building agentic systems or AI agents applied to security or operations.
What do we have to offer you?
•A company that keeps growing, changing and innovating, with room for teams to be proactive and creative.
•Career opportunities, including promotions and moves to other teams in the company.
•Colleagues who are smart, hardworking and driven, spread across the globe.
•We work to four company values: Trust, Customer Success, Innovation and Alignment.
•We act as one global OutSystems team, which for this role means working as one with your counterpart in India.
•Real growth opportunities, including a Professional Development Fund and an Internal Mobility Program.
•A global collective of world-class talent, collaborating with enterprise software legends and accessible, approachable mentors.
More about OutSystems
OutSystems is a leading AI Development Platform built for the enterprise. Global organizations trust OutSystems to rapidly build mission-critical apps and agents, modernize legacy processes with agentic systems, and govern their entire AI portfolio across complex regulatory environments, all on one unified platform. OutSystems is a global company, with more than 900k developer community members, 1,700 employees, more than 600 partners, and thousands of active customers in over 75 countries and across 21 industries. Founded in 2001, OutSystems now has offices in the United States, United Kingdom, the Netherlands, Portugal, Germany, the UAE, Japan, Hong Kong, Malaysia, Australia, India, and Singapore, and includes a thriving, worldwide community of remote employees.
