Senior Principal DevSecOps Engineer United States (Employee)

📋 Description

• • Architect and own the next generation of Hubstaff’s global, multi-cloud infrastructure—supporting 95,000+ active organizations and petabytes of workforce analytics data—while ensuring 99.9 %+ uptime and sub-second response times for our web, mobile, and desktop applications.
• • Lead the design and implementation of secure, highly available AWS and GCP environments using Terraform, Terragrunt, and Helm; codify every layer from VPC topology and IAM guardrails to auto-scaling node groups and multi-region disaster recovery.
• • Build and harden CI/CD pipelines in GitHub Actions and ArgoCD that deploy dozens of microservices (Ruby on Rails, Go, Rust, NodeJS) multiple times per day with zero-downtime blue/green releases, automated canary analysis, and instant rollback capabilities.
• • Establish and continuously evolve our container orchestration strategy on managed Kubernetes (EKS); optimize cluster cost, performance, and security with pod disruption budgets, network policies, and fine-grained resource quotas.
• • Instrument end-to-end observability using Prometheus, Grafana, Loki, CloudWatch, and Betterstack—defining SLIs/SLOs, anomaly detection rules, and on-call playbooks that reduce MTTR from hours to minutes.
• • Design and operate secure data lakes and real-time ETL pipelines on ClickHouse and PostgreSQL that power workforce analytics dashboards and ML-driven insights; enforce encryption at rest and in transit, column-level ACLs, and automated data retention policies.
• • Champion DevSecOps culture by embedding security into every stage of the SDLC: threat modeling, container image scanning, dependency vulnerability management, secrets rotation, and automated compliance checks against SOC 2 and ISO 27001 controls.
• • Partner with the CTO and engineering leadership to set long-term technical strategy, evaluate emerging technologies (service mesh, serverless, edge computing), and create architectural decision records (ADRs) that guide teams for years.
• • Mentor and level-up a distributed team of DevOps and backend engineers through pair programming, architecture reviews, and internal guilds; foster a blameless post-mortem culture that turns incidents into shared learning.
• • Own incident response and disaster recovery planning—design multi-region failover scenarios, run quarterly game days, and maintain runbooks that ensure business continuity even during region-wide cloud outages.
• • Continuously optimize cloud spend using cost-allocation tags, reserved capacity planning, and automated resource right-sizing; deliver monthly FinOps reports that align infrastructure growth with company OKRs.
• • Collaborate cross-functionally with Product, Data, and Customer Success teams to translate business requirements into resilient technical solutions, ensuring that every new feature ships securely and scales effortlessly.