Principal DevSecOps Engineer

Job Description: About the EcoStruxure Building Data Platform The EcoStruxure Building Data Platform is Schneider Electric's independent data layer for collecting, contextualizing, storing, and analyzing building operational data at scale. The platform ingests and processes real-time telemetry from connected building systems using cloud-native technologies hosted in Microsoft Azure. It provides the foundation for analytics, digital services, applications, and customer integrations across Schneider Electric's building ecosystem. Role Overview We are seeking a Principal DevSecOps Engineer to own the implementation, operation, and continuous improvement of the security posture of the EcoStruxure Building Data Platform. This role serves as the hands-on security leader embedded within the engineering organization. The successful candidate will lead security tooling, security automation, vulnerability remediation coordination, software supply chain security, Secure SDLC implementation, release security readiness, and cloud security enablement across the platform. The Principal DevSecOps Engineer is accountable for the implementation and operational execution of product security controls. This role works closely with: Security Advisor Principal Systems Engineer Engineering Technical Leads Principal Cloud Operations & Infrastructure Engineer Product Owners Schneider Electric Product Security 24x7 Operation Support Team The Security Advisor remains responsible for independent governance, risk assessment, policy interpretation, CPCERT alignment, risk acceptance guidance, and security oversight. In this role, you are responsible for implementation, execution, automation, evidence generation, and remediation coordination. Key Responsibilities Security Posture Management Own the operational security posture of the EcoStruxure Building Data Platform. Establish and maintain security baselines across applications, cloud services, containers, APIs, CI/CD systems, and supporting platform components. Continuously assess security maturity and identify opportunities for improvement. Implement security controls and automation that reduce platform risk. Report operational security health, remediation status, and security trends. Vulnerability Management & Remediation Operate vulnerability management activities in accordance with Schneider Electric CPCERT processes and security requirements. Perform technical triage of findings from SonarQube, Black Duck Binary Analysis (BDBA), penetration tests, container security scans, dependency analysis tools, and cloud security assessments. Assess technical applicability of vulnerabilities and identify remediation approaches for affected platform components. Partner with the Security Advisor on vulnerability prioritization, risk evaluation, exception reviews, and remediation timelines. Lead remediation planning and coordinate execution with Technical Leads and engineering teams. Track remediation progress, closure status, security debt metrics, and vulnerability trends. Support vulnerability reporting and evidence requirements for security reviews, audits, and compliance activities. Secure SDLC Implementation & Automation Partner with the Security Advisor to implement Secure SDLC requirements across the EcoStruxure Building Data Platform. Embed automated security controls and validation activities into GitHub Actions workflows and deployment pipelines. Implement approved security gates and release readiness checks within software delivery processes. Generate and maintain security evidence required for product release reviews and compliance activities. Support developer enablement through practical guidance, tooling, templates, and automation that promote secure engineering practices. Improve security visibility within the software development lifecycle through automation and metrics. Software Supply Chain Security Own Software Bill of Materials (SBOM) generation and management processes. Establish software supp…

View the full posting and apply