[Hiring] Principal Software Engineer @OutSystems

Role Description

We are hiring a Principal Engineer to own the technical strategy for securing the inner loop of our delivery: the images, repositories, registries, and developer workflows that every build starts from.

• Own the technical strategy for inner-loop security across R&D: set direction, make trade-off calls, and bring engineering, product, and security leadership along.
• Stay hands-on: design and build what you architect (base image pipelines, registry policy, GitHub automation, IaC modules, security tooling), own critical paths yourself, and work in the code alongside the team.
• Own the base image supply: hardened image provenance, lifecycle, and rebuild automation, so every build starts from a known-good foundation.
• Govern the registries: what can be pushed, pulled, and promoted, by whom, and with what provenance, so nothing reaches a build outside the governed path.
• Own GitHub governance: organization-level policy, access and DLP controls, repository standards, and the automation that keeps hundreds of repositories compliant without slowing engineers down.
• Build security into the SDLC from the start: automated SAST, DAST, SCA, and secrets detection in developer workflows, tuned to keep false positives low.
• Produce the provenance and evidence the release path depends on, so verification at deploy time is automatic rather than manual.
• Lead cross-team technical initiatives that raise engineering standards across the organization, and lead architecture and design reviews at a strategic level.
• Mentor engineers at every level, beyond your immediate team.
• Apply AI and agents to how release and security engineering work gets done.
• Write the standards others build against: security baselines, IaC patterns, repository and image standards, based on what you have implemented yourself.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience.
• You have owned the security of a source-to-build platform (repositories, images, registries, developer tooling) end to end, at scale, for a large engineering organization.
• Deep security engineering background: software supply chain security at the source (hardened images, registry governance, provenance), SDLC security gating, secrets management, and source control governance.
• Hands-on experience with GitHub at organization scale: policies, GitHub Actions, GitHub Advanced Security or equivalent, and API-driven automation.
• Hands-on experience with Kubernetes and container tooling, a major cloud (Azure and/or AWS), CI/CD at scale, Terraform, and modern SDLC languages (Python, .NET).
• Working knowledge of SOC 2 Type 2 and FedRAMP Moderate, including how their controls apply to source control and build integrity.
• A track record of cross-team technical leadership and mentoring without formal management authority.
• Working hours with meaningful overlap with our European teams, and willingness to work across time zones.
• Fluency in English, written and spoken, and excellent communication skills.

Requirements

• Familiarity with hardened base image distributions (such as Chainguard), SLSA, Sigstore, or SBOM tooling in production.
• Experience building agentic systems or AI agents applied to developer workflows.
• Experience in platform engineering or developer experience for large engineering organizations.

Benefits

• A company that keeps growing, changing, and innovating, with room for teams to be proactive and creative.
• Career opportunities, including promotions and moves to other teams in the company.
• Colleagues who are smart, hardworking, and driven, spread across the globe.
• We work to four company values: Trust, Customer Success, Innovation, and Alignment.