Senior DevSecOps Engineer

About the role

Impinj delivers the Physical Intelligence that connects the physical world to the AI-powered digital world, fueling automated workflows and improving consumer experiences. From retail merchandise and groceries to packages and shipping pallets, Impinj products and solutions identify and track tens of billions of everyday items, providing real-time operational insights about every item enterprises make, move and sell. We are, quite literally, the eyes and ears of smart enterprise systems. Come help us build technology and solutions that enable businesses to visualize everything, waste nothing and act instantly.

Team Overview:

Our Information Security team is seeking an experienced and results-driven Senior DevSecOps Engineer to drive secure-by-design practices throughout application development and operations. This role will report to the Director, Information Security, and act as a trusted security partner embedded with one of our engineering teams. You’ll shift security left by translating requirements into working controls, secure defaults, and pipeline guardrails. This role requires on-site presence at our Fairview office in Seattle on a hybrid basis.

What You Will Do:

- Serve as a day-to-day security advisor for the team you support, advocating security requirements as an engineering team member during sprint planning, architecture reviews, process discussions, product direction, design decisions, and while work is in flight

- Build and maintain centralized automated security testing and enforcement in CI/CD, including static and dynamic application security testing (SAST/DAST), software composition analysis (SCA), secrets scanning, and infrastructure-as-code (IaC) scanning

- Manage centralized cloud monitoring tooling for vulnerability and configuration management, and integrate ongoing patching and hardening into engineering operations

- Continually audit application environments and development processes to ensure compliance with internal and external requirements, and alignment with security standard methodologies

- Manage the company’s software development life cycle policy alongside Information Security leadership

- Implement and maintain cloud detection and response monitoring, and act as an incident CIRT responder

- Document controls, configurations, and decisions to build durable institutional knowledge

What You Will Bring:

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience

- 8+ years of experience in DevOps, software engineering, or security engineering

- Proficiency with CI/CD platforms (e.g., GitHub Actions, GitLab CI, Jenkins) and infrastructure as code tools (e.g., Terraform, CloudFormation, Azure Bicep)

- Hands-on cloud security experience in AWS and/or Azure, including identity and access management, containerization, network security controls, encryption, logging, and monitoring