Principal Cloud DevSecOps Engineer

Principal Cloud DevSecOps Engineer Location: TARRYTOWN The Regeneron Genetics Center (RGC) IT team is looking for a passionate Principal Cloud DevSecOps Engineer with strong technical ability, communication, and collaboration skills. As the Principal Cloud DevSecOps Engineer, you will be responsible for the design and implementation of cloud infrastructure, automation, security controls, and compliance processes on AWS, supporting data, HPC, AI, and microservice platforms used by research scientists and bioinformaticians. You will work hands-on to build and implement cloud DevSecOps solutions, embed security into system design, and provide technical support and guidance to end users and internal teams. You will also provide technical mentorship for Lead and Senior DevSecOps engineers and coordinate with InfoSec, Privacy, and internal IT teams to ensure security, scalability, and reliability of the RGC cloud platform. In this role, a typical day might include the following: Design and implement infrastructure-as-code, automation scripts, and CI/CD pipelines supporting data, HPC, AI, and microservice platforms on AWS Embed security controls into system design and implementation — including IAM policies, network segmentation, secrets management, and compliance validation pipelines Design and implement tools to automate operational processes across RGC’s cloud and systems engineering platforms Support all audit related activities including providing evidence and remediation of findings for RGC’s cloud platform Develop and implement continuous delivery systems and CI/CD methodologies for RGC’s systems engineering platforms using both AWS services and GitHub Actions, ARC self-hosted runners on EKS, and SAST/DAST integration. Recommend and deploy monitoring, metrics, and logging systems on RGC’s cloud engineering platforms Identify and implement opportunities to build systems that are highly available, scalable, and self-healing Develop SOPs and configure cloud services to support compliance validation Provide technical support, training, and documentation to end users and research teams using RGC’s data, HPC, AI, and microservice platforms Serve as a technical point of contact for user-facing issues related to cloud platform, DevOps pipelines, security services, and solving problems in collaboration with internal IT teams Stay on top of the latest advances in cloud platforms and related security & compliance controls Provide technical guidance and mentorship for Lead and Senior DevSecOps engineers Interact with InfoSec and Privacy teams to define and iterate on security requirements, and implement them across the platform This job might be for you if: You have an eye for detail and pride yourself on the quality of your work. Operational excellence and secure-by-design thinking matter more than just finishing the tasks. You thrive in a fast-paced environment working across data, HPC, AI, and microservice platforms, and enjoy being a technical resource for the teams that depend on them. You work on current problems while thinking of future solutions, and take satisfaction in both building the right thing and supporting the people who use it. To be considered for the Principal Cloud DevSecOps Engineer, you must have: Bachelor's Degree in Computer Science, or related field. 8+ years of in-depth AWS services experience and relevant security certifications. Hands-on experience designing and implementing cloud infrastructure automation, CI/CD pipelines, infrastructure-as-code, and security controls. Solid understanding of cloud security posture including IAM, network segmentation, secrets management, compliance validation, and security-by-design principles. Experience supporting data, HPC, AI, or microservice platforms in a technical or user-facing capacity. Knowledge of core AWS services EC2, EBS, S3, ELB, RDS, EKS, and IAM. Tangible experience with Linux administration and automation of security controls and compliance validation. Experience with monitoring tools like Splunk, Grafana, Prometheus. AWS and other related certifications are a plus. Level commensurate on experience and qualifications. Regeneron is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability status, protected veteran status, or any other characteristic protected by law. Does this sound like you? Apply now to take your first step towards living the Regeneron Way! We have an inclusive culture that provides comprehensive benefits, which vary by location.  In the U.S., benefits may include health and wellness programs (including medical, dental, vision, life, and disability insurance), fitness centers, 401(k) company match, family support benefits, equity awards, annual bonuses, paid time off, and paid leaves (e.g., military and parental leave) for eligible employees at all levels! For additional information about Regeneron benefits in the US, please visit https://careers.regeneron.com/en/working-at-regeneron/total-rewards/.  For other countries’ specific benefits, please speak to your recruiter. Please be advised that at Regeneron, we believe we are most successful and work best when we are together.  For that reason, many of Regeneron’s roles are required to be performed on-site.  Please speak with your recruiter and hiring manager for more information about Regeneron’s on-site policy and expectations for your role and your location. Regeneron is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion or belief (or lack thereof), sex, nationality, national or ethnic origin, civil status, age, citizenship status, membership of the Traveler community, sexual orientation, disability, genetic information, familial status, marital or registered civil partnership status, pregnancy or parental status, gender identity, gender reassignment, military or veteran status, or any other protected characteristic in accordance with applicable laws and regulations. The Company will also provide reasonable accommodation to the known disabilities or chronic illnesses of an otherwise qualified applicant for employment, unless the accommodation would impose undue hardship on the operation of the Company's business. For roles in which the hired candidate will be working in the U.S., the salary ranges provided are shown in accordance with U.S. law and apply to U.S.-based positions.  For roles which will be based in Japan and/or Canada, the salary ranges are shown in accordance with the applicable local law and currency. If you are outside the U.S, Japan or Canada, please speak with your recruiter about salaries and benefits in your location. Please note that certain background checks will form part of the recruitment process.  Background checks will be conducted in accordance with the law of the country where the position is based, including the type of background checks conducted. The purpose of carrying out such checks is for Regeneron to verify certain information regarding a candidate prior to the commencement of employment such as identity, right to work, educational qualifications etc. Salary Range (annually) $128,600.00 - $210,000.00