Principal DevOps Engineer

Location: San Francisco, Denver, Boston, Remote

Who Are We?  

About Airlock Digital: 

Airlock Digital is a global leader in application control and allowlisting. We seek to empower every organization to run only what they trust and operate free from malware and ransomware.  

With rapid growth across Australia, North America, and EMEA. We are committed to our core values, respect, determination, and integrity. We support a diverse and expanding global customer base. At Airlock, we pride ourselves on being a team of humble, collaborative, and driven professionals who support one another and share a passion for cybersecurity.

What We are Looking For: 

We are looking for a Principal DevOps Engineer to improve the systems Airlock Digital uses to build, test, secure, and release its customer-hosted and multi-tenant SaaS products. You will work across engineering to design reliable delivery workflows, apply and improve team standards, and help product teams ship dependable software with less manual effort.

Our delivery environment spans cloud services, customer-hosted products, native endpoint software, Linux packages, containers, and signed installers. You will build and support the systems that test, secure, promote, and release them, working with engineering, product, QA, security, and support.

Key Responsibilities:

• Own the reliability and continual improvement of the CI/CD and release systems you maintain for cloud services and native software across Windows, macOS, and Linux. Design and implement reusable workflows with product teams, using delivery measures and engineering judgment to identify risks, remove bottlenecks, and improve release confidence.

• Implement and maintain pull request and branch policies, including permissions, merge checks, approvals, and security controls. Work with product teams to build dependable gates for unit, integration, end-to-end, packaging, upgrade, and platform-compatibility tests.

• Improve deployment observability, alerting, and release readiness. Partner with engineering teams to investigate build, deployment, and release failures, and use incident findings to improve release safety and recovery.

• Implement and improve software supply-chain controls with engineering and security teams, including automated security checks, artifact integrity, and auditable release promotion. Protect CI credentials and signing material through least-privilege access and managed secret stores.

• Modernize existing build and release workflows while preserving supported operating systems, architectures, installation paths, and upgrade behavior.

• Troubleshoot complex delivery failures, review automation changes, and mentor engineers in reliable build and release practices.

Required Skills & Qualifications: 

• 7+ years of professional software engineering or DevOps experience, including ownership of complex production build, test, deployment, and release systems, contributions to technical design and standards, and support for other engineers.

• Strong experience building and operating CI/CD systems. This should include Git pull request controls, branch policies, change-management integration, and quality gates for several types of automated testing.

• Experience writing, testing, and maintaining automation code in a programming or scripting language, with attention to readability, error handling, and code review.

• Production experience delivering cloud services, including secrets management, environment promotion and rollback, observability, alerting, and incident response.

• Working knowledge of software supply-chain security, with hands-on experience in areas such as vulnerability management, artifact integrity, signing credentials, provenance, or auditable release controls.

• Experience automating builds, packaging, signing, or releases on at least one of Windows, macOS, or Linux, with the ability to learn and troubleshoot delivery workflows across additional platforms.

Nice-to-Have Skills and Experience

• Experience with application control, endpoint security, or another security-critical product where release integrity and auditability matter.

• Experience delivering and operating production services on Azure.

• Experience building self-service developer tooling used by multiple product teams.

• A bachelor’s degree in computer science, software engineering, or a related field is preferred but not required; equivalent practical experience is welcomed.

What We Offer: 

We don’t think money is everything, but we know it is an important part of your decision to apply for a role. Additional factors considered in extending an offer include responsibilities of the job, education, location, experience, knowledge, skills, abilities, and internal equity, alignment with market data, or applicable laws.  

At Airlock Digital we offer a wide range of benefits to our eligible team members. Our benefit programs vary by location and can include Medical, dental, and vision insurance – 401K Plan with 4% Company Match – Life and Disability Programs – Paid Parental Leave - Paid time off and Paid Holidays – Volunteer and Birthday Time off – Home Office Allowance 

Our Commitment: 

We believe in supporting our team members both personally and professionally. Named one of the USA’s Greatest Places to Work in 2024 and 2025, we value flexibility, trust, and a work environment that empowers our team to do their best work. 

We will be assessing applications as they come in, so we encourage you to send your resume through to us as soon as possible. All official job offers from our company are extended directly by our recruitment team and will be sent through an official BambooHR document for your review and signature. Please be aware that we do not ask for any personal information in the process of extending offers of employment, such as financial details or social security numbers. Upon acceptance of any offer, we will request such information as part of the onboarding process prior to or on your first day of employment, and only after completing a background check through an authorized third-party vendor. If you receive any communication asking for personal details outside of these processes, please contact us immediately to verify the authenticity of the request. Your security is important to us, and we are committed to a safe and transparent hiring experience. No contact from recruitment agencies, thank you