Principal Software Engineer (DevSecOps)

$112,000 - $197,000/Yr

Safran - Brea, CA

Full-time - Principal

Brea, CA

Transportation Equipment Manufacturing

About the position

The Principal Software Engineer (DevSecOps) at Safran Passenger Innovations will play a crucial role in enhancing and modernizing the CI/CD platform for In-Flight Entertainment (IFE) products. This position involves engaging with a cross-disciplinary team to design, implement, and support innovative solutions while applying state-of-the-art DevSecOps principles and technologies. The engineer will be responsible for governance planning, troubleshooting deployment issues, and mentoring team members in best practices.

Responsibilities

• Define and implement governance plan for CI/CD processes.
• Design, develop, and improve CI/CD tooling for complex distributed systems.
• Troubleshoot, triage, debug, and resolve build and deployment problems.
• Provide guidance, mentoring, training, and support in DevSecOps best practices across product development.

Requirements

• 5+ years of experience in governance planning, architecting, designing, implementing, and deploying CI/CD pipelines using tools like Ansible, Puppet, Jenkins, Terraform, and AWS.
• Experience managing source code/artifact repositories like SVN, Bitbucket, Artifactory, AWS ECR.
• Experience integrating CI/CD pipelines with source code and package library analysis/scanning tools like SonarCube, Mend.io, Snyk, Coverity.
• Experience with Infrastructure as Code and infrastructure testing strategies.
• Experience fully automating CI/CD pipelines from code commits to production for cloud and embedded devices.
• Experience with containerization technologies like Kubernetes, Docker, AWS ELK, AWS ECS.
• Experience designing and implementing CI/CD pipelines for C, C++, C#, nodejs applications for ARM and x86 processors.
• Familiarity with security/cryptography concepts such as PKI, SSL, and TLS in DevSecOps processes.
• Strong scripting skills in shell scripts, Perl, Python, Groovy, Helm.
• Experience in UNIX/Linux/Windows environments hosted in cloud and on-prem.
• Understanding of PaaS concepts and constructing compute platforms from hardware to software.
• Skilled at designing high availability platforms with quick recovery objectives.
• Understanding of Linux kernel and creating custom Linux distributions using Yocto.
• Familiarity with AWS Policy, Configuration, and Security Management tools.
• Experience with security engineering concepts in regulated environments (PCI-DSS, PII, GDPR, CCPA).
• Experience with formal Engineering Requirements documentation.

Nice-to-haves

• Understanding of embedded system software architecture and constraints with ARM/x86 processors.
• Cellular modem/firmware knowledge.
• Adept at implementing internal tools for the DevSecOps stack.
• Understanding of Video/Media content, playback, delivery, and streaming including DRM.
• Experience with low-level kernel/driver knowledge of Linux 4.x and 5.x.
• Familiarity with Python, Qt/QML, and GUI development.
• Knowledge of MQTT, IPC, RPC, sockets, and audio/video players.
• Experience with highly available, fault-tolerant, distributed, or clustered systems development.
• Understanding of A/V device drivers and libraries.
• Knowledge of 4K Video and DRM.
• Familiarity with ARINC 429 and RS-485/422 data transfer.
• Understanding of bus design: I2C, PCIe, SPI, MDIO, CAN.
• Experience with Windows programming using C/C++/C#, .Net, JavaScript, SQL, Node, Go, and AWS Lambda.
• Familiarity with micro-service architecture and refactoring monolithic solutions into distributed microservices.

Benefits

• Starting pay range of $112,000 - $197,000, varying based on skills, experience, and location.