FAST Labs Principal Software Engineer - Release Engineering & DevSecOps

Job Description Join our dynamic team of innovators and shape the future of technology with us. We're on the hunt for curious and driven individuals who thrive in collaborative environments and are passionate about harnessing the power of software to drive meaningful impact. If you're a creative problem-solver, a lifelong learner, and a team player who is always looking for ways to improve and innovate, we'd love to meet you.

Our ideal candidate is someone who is proactive, adaptable, and excited about tackling new challenges head-on. Whether you're a seasoned developer or just starting your journey, if you're eager to learn, grow, and make a real difference, we want to hear from you.

Join the Cutting-Edge Research and Development Team in FAST Labs The BAE Systems' FAST Labs team conducts research and development in areas critical to national security, including Advanced Electronics, Autonomy, Sensors & Processing, Artificial Intelligence, Electronic Warfare, and Cyber Operations & Defense. We foster a "what's next" mentality, driving the creation of cutting-edge solutions that address the defense industry's most pressing challenges.

As a Principal Software Engineer focused on Release Engineering & DevSecOps for the R3 Product Line, you will be a key driver in ensuring the rapid, secure, and reliable delivery of our advanced software solutions. Your work will involve:

- Pipeline Development & Management: Architect, design, build, and maintain robust CI/CD pipelines for the R3 Product Line, automating build, test, and deployment processes. - DevSecOps Implementation: Champion and implement DevSecOps principles, integrating security scanning, vulnerability management, and compliance checks throughout the entire software development lifecycle. - Release Management: Own the release cycle for multiple products or programs.

Lead release planning, coordination, and execution, ensuring smooth and predictable software releases. Provide weekly release status updates and flag schedule risks early - Infrastructure Automation: Utilize infrastructure-as-code practices to automate the provisioning and management of development, testing, and production environments. - Containerization & Cloud: Leverage containerization technologies (Docker, Kubernetes) and cloud platforms (AWS, Azure, GCP) as well as air-gapped environments to build scalable and resilient software solutions. - Security Focus: Implement and enforce security best practices, including vulnerability scanning and secure coding standards. - Collaboration: Work closely with software developers, program management, engineering management, systems engineers, and security specialists to foster a culture of collaboration and continuous improvement. - Compliance & Documentation: Ensure adherence to relevant security and regulatory compliance standards and maintain thorough documentation of release processes and infrastructure. - Troubleshooting & Support: Provide troubleshooting and support for build, deployment, and operational issues.

Grow Your Career with a Purpose At BAE Systems, we're committed to helping you achieve your full potential. You'll be part of a high-performing team dedicated to protecting our military service personnel and innovating for the greater good.

We offer comprehensive training programs, mentorship, and opportunities for professional development. Work Environment

This role requires 100% on-site work at a BAE Systems facility due to the need for consistent, in-person collaboration and secure access to sensitive information. Occasional domestic travel may be required to support integration and test events.

- Active Top Secret Clearance - Bachelor's Degree in Computer Science, Computer Engineering, or a related technical field - 4+ years of experience in software build engineering, release engineering, or DevOps/DevSecOps roles - Strong understanding and advocacy of DevSecOps principles - Experience with Object Oriented design, development practices, and implementation in C++11 (or later) - Experience developing for and operating in a Linux Environment - Demonstrated experience building and maintaining multi-stage CI/CD pipelines (e.g., Jenkins, GitLab CI, Azure DevOps) - Hands-on experience with Meson and CMake for C/C++ projects. - Experience with C/C++ dependency management (e.g.

Conan) - Experience with creating and maintaining RPM and DEB packages including spec files and Debian control files. - Experience integrating security testing (e.g., SAST, SBOM) into the software development lifecycle - Experience with containerization technologies (Docker, Podman, Kubernetes) and orchestration - Experience with infrastructure as code (IaC) tools (e.g., Terraform, Ansible) - Experience defining and monitoring DevSecOps metrics and KPIs including DORA - Proficiency in Python for build scripting, automation, and package distribution (e.g. uv, pip) - Strong Git proficiency including branching strategies, tagging, and merge workflows

- Master's Degree in Computer Science, Computer Engineering, or a related technical field - MATLAB Experience - Experience working with and testing real-time, embedded, multi-threaded, low latency systems. - Familiarity with configuration management tools (e.g., Chef, Puppet) - Experience with securing artifact repositories (e.g., Nexus, Harbor) and release management processes. - Golang build toolchain and module management experience - Experience in a DoD, government, or defense contractor environment - Familiarity with CMMI or ISO configuration management practices - Familiarity with security/compliance frameworks (e.g., NIST 800-53) - Familiarity with SBOM generation (SPDX, CycloneDX) and supply chain security practices