Principal DevOps Engineer

<h3><span style="font-size: 14pt;">Location: San Francisco, Denver, Boston, Remote</span></h3> <h3><span style="font-size: 14pt;">Who Are We?  </span></h3> <h3><span style="font-size: 14pt;">About Airlock Digital: </span></h3> <p><span style="font-size: 14pt;">Airlock Digital is a global leader in application control and allowlisting. We seek to empower every organization to run only what they trust and operate free from malware and ransomware.  </span></p> <p><span style="font-size: 14pt;">With rapid growth across Australia, North America, and EMEA. We are committed to our core values, respect, determination, and integrity. We support a diverse and expanding global customer base. At Airlock, we pride ourselves on being a team of humble, collaborative, and driven professionals who support one another and share a passion for cybersecurity.</span></p> <p> </p> <h3><span style="font-size: 14pt;">What We are Looking For: </span></h3> <p><span style="font-size: 14pt;"><span data-contrast="none">We are looking for a Senior DevOps Engineer to improve the systems Airlock Digital uses to build, test, secure, and release its customer-hosted and multi-tenant SaaS products. You will work across engineering to design reliable delivery workflows, apply and improve team standards, and help product teams ship dependable software with less manual effort.</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":264}"> </span></span></p> <p><span style="font-size: 14pt;"><span data-contrast="none">Our delivery environment spans cloud services, customer-hosted products, native endpoint software, Linux packages, containers, and signed installers. You will build and support the systems that test, secure, promote, and release them, working with engineering, product, QA, security, and support.</span><span data-ccp-props="{"201341983":0,"335559739":120,"335559740":264}"> </span></span></p> <h3><span style="font-size: 14pt;">Key Responsibilities:</span></h3> <ul> <li style="font-size: 14pt;" data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1"><span style="font-size: 14pt;"><span data-contrast="none">Own the reliability and continual improvement of the CI/CD and release systems you maintain for cloud services and native software across Windows, macOS, and Linux. Design and implement reusable workflows with product teams, using delivery measures and engineering judgment to identify risks, remove bottlenecks, and improve release confidence.</span><span data-ccp-props="{"134245529":true,"201341983":0,"335559739":80,"335559740":240}"> </span></span></li> </ul> <ul> <li style="font-size: 14pt;" data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"singleLevel"}" data-aria-posinset="2" data-aria-level="1"><span style="font-size: 14pt;"><span data-contrast="none">Implement and maintain pull request and branch policies, including permissions, merge checks, approvals, and security controls. Work with product teams to build dependable gates for unit, integration, end-to-end, packaging, upgrade, and platform-compatibility tests.</span><span data-ccp-props="{"134245529":true,"201341983":0,"335559739":80,"335559740":240}"> </span></span></li> </ul> <ul> <li style="font-size: 14pt;" data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"singleLevel"}" data-aria-posinset="3" data-aria-level="1"><span style="font-size: 14pt;"><span data-contrast="none">Improve deployment observability, alerting, and release readiness. Partner with engineering teams to investigate build, deployment, and release failures, and use incident findings to improve release safety and recovery.</span><span data-ccp-props="{"134245529":true,"201341983":0,"335559739":80,"335559740":240}"> </span></span></li> </ul> <ul> <li style="font-size: 14pt;" data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"singleLevel"}" data-aria-posinset="4" data-aria-level="1"><span style="font-size: 14pt;"><span data-contrast="none">Implement and improve software supply-chain controls with engineering and security teams, including automated security checks, artifact integrity, and auditable release promotion. Protect CI credentials and signing material through least-privilege access and managed secret stores.</span><span data-ccp-props="{"134245529":true,"201341983":0,"335559739":80,"335559740":240}"> </span></span></li> </ul> <ul> <li style="font-size: 14pt;" data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"singleLevel"}" data-aria-posinset="5" data-aria-level="1"><span style="font-size: 14pt;"><span data-contrast="none">Modernize existing build and release workflows while preserving supported operating systems, architectures, installation paths, and upgrade behavior.</span><span data-ccp-props="{"134245529":true,"201341983":0,"335559739":80,"335559740":240}"> </span></span></li> </ul> <ul> <li style="font-size: 14pt;" data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"singleLevel"}" data-aria-posinset="6" data-aria-level="1"><span style="font-size: 14pt;"><span data-contrast="none">Troubleshoot complex delivery failures, review automation changes, and mentor engineers in reliable build and release practices.</span><span data-ccp-props="{"134245529":true,"201341983":0,"335559739":80,"335559740":240}"> </span></span></li> </ul> <h3><span style="font-size: 14pt;">Required Skills & Qualifications: </span></h3> <ul> <li style="font-size: 14pt;" data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"singleLevel"}" data-aria-posinset="7" data-aria-level="1"><span style="font-size: 14pt;"><span data-contrast="none">7+ years of professional software engineering or DevOps experience, including ownership of complex production build, test, deployment, and release systems, contributions to technical design and standards, and support for other engineers.</span><span data-ccp-props="{"134245529":true,"201341983":0,"335559739":80,"335559740":240}"> </span></span></li> </ul> <ul> <li style="font-size: 14pt;" data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"singleLevel"}" data-aria-posinset="8" data-aria-level="1"><span style="font-size: 14pt;"><span data-contrast="none">Strong experience building and operating CI/CD systems. This should include Git pull request controls, branch policies, change-management integration, and quality gates for several types of automated testing.</span><span data-ccp-props="{"134245529":true,"201341983":0,"335559739":80,"335559740":240}"> </span></span></li> </ul> <ul> <li style="font-size: 14pt;" data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"singleLevel"}" data-aria-posinset="9" data-aria-level="1"><span style="font-size: 14pt;"><span data-contrast="none">Experience writing, testing, and maintaining automation code in a programming or scripting language, with attention to readability, error handling, and code review.</span><span data-ccp-props="{"134245529":true,"201341983":0,"335559739":80,"335559740":240}"> </span></span></li> </ul> <ul> <li style="font-size: 14pt;" data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"singleLevel"}" data-aria-posinset="10" data-aria-level="1"><span style="font-size: 14pt;"><span data-contrast="none">Production experience delivering cloud services, including secrets management, environment promotion and rollback, observability, alerting, and incident response.</span><span data-ccp-props="{"134245529":true,"201341983":0,"335559739":80,"335559740":240}"> </span></span></li> </ul> <ul> <li style="font-size: 14pt;" data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"singleLevel"}" data-aria-posinset="11" data-aria-level="1"><span style="font-size: 14pt;"><span data-contrast="none">Working knowledge of software supply-chain security, with hands-on experience in areas such as vulnerability management, artifact integrity, signing credentials, provenance, or auditable release controls.</span><span data-ccp-props="{"134245529":true,"201341983":0,"335559739":80,"335559740":240}"> </span></span></li> </ul> <ul> <li style="font-size: 14pt;" data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"singleLevel"}" data-aria-posinset="12" data-aria-level="1"><span style="font-size: 14pt;"><span data-contrast="none">Experience automating builds, packaging, signing, or releases on at least one of Windows, macOS, or Linux, with the ability to learn and troubleshoot delivery workflows across additional platforms.</span><span data-ccp-props="{"134245529":true,"201341983":0,"335559739":80,"335559740":240}"> </span></span></li> </ul> <p><span style="font-size: 14pt;"><strong><span data-contrast="none"><span data-ccp-parastyle="heading 1">Nice-to-Have Skills and Experience</span></span></strong><span data-ccp-props="{"134245418":true,"134245529":true,"201341983":0,"335559738":320,"335559739":160,"335559740":240}"> </span></span></p> <ul> <li style="font-size: 14pt;" data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"singleLevel"}" data-aria-posinset="13" data-aria-level="1"><span style="font-size: 14pt;"><span data-contrast="none">Experience with application control, endpoint security, or another security-critical product where release integrity and auditability matter.</span><span data-ccp-props="{"134245529":true,"201341983":0,"335559739":80,"335559740":240}"> </span></span></li> </ul> <ul> <li style="font-size: 14pt;" data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1"><span style="font-size: 14pt;"><span data-contrast="none">Experience delivering and operating production services on Azure.</span><span data-ccp-props="{"134245529":true,"201341983":0,"335559739":80,"335559740":240}"> </span></span></li> </ul> <ul> <li style="font-size: 14pt;" data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"singleLevel"}" data-aria-posinset="15" data-aria-level="1"><span style="font-size: 14pt;"><span data-contrast="none">Experience building self-service developer tooling used by multiple product teams.</span><span data-ccp-props="{"134245529":true,"201341983":0,"335559739":80,"335559740":240}"> </span></span></li> </ul> <ul> <li style="font-size: 14pt;" data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"singleLevel"}" data-aria-posinset="16" data-aria-level="1"><span style="font-size: 14pt;"><span data-contrast="none">A bachelor’s degree in computer science, software engineering, or a related field is preferred but not required; equivalent practical experience is welcomed.</span><span data-ccp-props="{"134245529":true,"201341983":0,"335559739":80,"335559740":240}"> </span></span></li> </ul> <p> </p> <h3><span style="font-size: 14pt;">What We Offer: </span></h3> <p><span style="font-size: 14pt;">We don’t think money is everything, but we know it is an important part of your decision to apply for a role. Additional factors considered in extending an offer include responsibilities of the job, education, location, experience, knowledge, skills, abilities, and internal equity, alignment with market data, or applicable laws.  </span></p> <p><span style="font-size: 14pt;">At Airlock Digital we offer a wide range of benefits to our eligible team members. Our benefit programs vary by location and can include Medical, dental, and vision insurance – 401K Plan with 4% Company Match – Life and Disability Programs – Paid Parental Leave - Paid time off and Paid Holidays – Volunteer and Birthday Time off – Home Office Allowance </span></p> <h3><span style="font-size: 14pt;">Our Commitment: </span></h3> <p><span style="font-size: 14pt;">We believe in supporting our team members both personally and professionally. Named one of the USA’s Greatest Places to Work in 2024 and 2025, we value flexibility, trust, and a work environment that empowers our team to do their best work. </span></p> <p><span style="font-size: 14pt;"><em>We will be assessing applications as they come in, so we encourage you to send your resume through to us as soon as possible. All official job offers from our company are extended directly by our recruitment team and will be sent through an official BambooHR document for your review and signature. Please be aware that we do not ask for any personal information in the process of extending offers of employment, such as financial details or social security numbers. Upon acceptance of any offer, we will request such information as part of the onboarding process prior to or on your first day of employment, and only after completing a background check through an authorized third-party vendor. If you receive any communication asking for personal details outside of these processes, please contact us immediately to verify the authenticity of the request. Your security is important to us, and we are committed to a safe and transparent hiring experience. No contact from recruitment agencies, thank you</em> </span></p>