Principal Secure Platform Engineering

Build the Future with AspenView Technology Partners At AspenView, we are passionate about transforming the way organizations approach technology. We specialize in creating high-performing, nearshore IT teams to help North American clients innovate faster and more efficiently. As we continue to grow, we’re looking for exceptional people to join our team and help drive impactful change across industries.   Why Join AspenView? At AspenView, we’re more than a nearshore IT partner—we’re a people-first, purpose-driven company that believes great culture drives great outcomes. We’re passionate about connecting talent and technology to deliver measurable value for clients—and meaningful career paths for our people. Here’s what you can expect: Competitive base Flexible work model: hybrid, remote, or in-office Real growth opportunities and leadership visibility Inclusive, respectful culture that blends U.S. innovation with Colombian heart A company that listens, invests in you, and celebrates wins together   The Principal Secure Platform Engineering Consultant is a senior, hands-on technical leader responsible for accelerating an enterprise-wide DevSecOps and secure software engineering transformation. Working alongside Cloud, Cybersecurity, and Infrastructure teams, you will move beyond project management to drive actual technical execution—translating strategic goals into architectural decisions, establishing essential guardrails, and enabling scalable, secure software delivery. While the ultimate goal is to establish a governed GitHub Enterprise ecosystem, we welcome experts whose primary background is in Azure DevOps or similar enterprise CI/CD platforms, provided they have the architectural maturity to lead this transition. What you will do: Platform Architecture & Implementation Lead the technical decisions to establish the target enterprise CI/CD environment (migrating to/activating GitHub) and its initial operating model. Define and configure repository, organization, access, branch protection, secrets, runner, and service-identity patterns. Define secure developer onboarding and repository provisioning processes. DevSecOps & Security Integration Establish minimum viable security and engineering guardrails for development teams without unnecessarily slowing them down. Implement patterns for CI/CD security, code scanning, dependency management, and runtime security integration. Integrate modern CNAPP and runtime security capabilities (such as Upwind) into developer and remediation workflows. Technical Leadership & Governance Develop and maintain formal Architecture Decision Records (ADRs) and translate them into actionable standards, policies, and implementation tasks. Resolve technical blockers by working directly with Cloud, Compute, Network, and Security teams. Identify decisions requiring executive escalation and provide concise recommendations and options. Create a prioritized 30/60/90-day roadmap for continued platform and security maturation. Tools & Technologies: Platforms & Infrastructure: Modern enterprise CI/CD architectures ( Azure DevOps, GitLab, or GitHub ), with the readiness and capability to lead the enterprise transition to GitHub Enterprise and GitHub Actions. Security & DevSecOps: SAST, SCA, secrets scanning, vulnerability management, and CNAPP/runtime security platforms (Upwind preferred). Cloud & IaC: Azure, Microsoft Entra ID (workload identity federation), Infrastructure as Code (Bicep/Terraform), and Azure Policy. What you bring: Experience: 7+ years of progressive experience in Platform Engineering, DevSecOps, Cloud, or Software Delivery architecture. Consulting / Leadership: Capable of facilitating technical decisions across infrastructure, security, and software engineering organizations, and driving implementation directly with engineering teams. Mindset: Pragmatic and execution-oriented. You combine the judgment of an architect with the drive of a senior engineer, comfortable making recommendations with incomplete information. Success is measured by working capabilities delivered and teams enabled, not just by documentation produced. Bonus Qualifications: Direct experience with GitHub Enterprise/Advanced Security, experience assisting large enterprises in transitioning from centralized infrastructure delivery toward federated/self-service engineering models, or executing enterprise migrations from Azure DevOps to GitHub. Visa Sponsorship AspenView does not sponsor employment visas for this role. Applicants must be permanently authorized to work in their country of residence and must not require visa sponsorship now or in the future. Equal Opportunity Employer AspenView is proud to be an equal opportunity employer. We believe in creating an environment where all employees feel welcome, valued, and empowered to succeed. We celebrate diversity and strive to build a culture of inclusion where all individuals, regardless of their race, color, gender, gender identity or expression, sexual orientation, disability, age, or any other characteristic, can thrive. We encourage applicants from all walks of life to join our team and make a lasting impact.

laptop-ats-crawler v1