Back to results

Sr. GRC Engineer

  • Seattle, WA, United States

Applications open in a new tab.

Job details

Apply by
Posting language
English
Posted

Original job description

Application close date:

Applications will be accepted on an ongoing basis until the requisition is closed. At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We're working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight! This role is part of Enterprise Technology (ET), where we're developing the digital infrastructure needed to build the road to space, with an emphasis on digital capabilities required to advance Blue Origin's mission. Enterprise Technology is the center of excellence for digital technology at Blue Origin, providing oversight and governance to align technology and business strategies. The Blue Origin Cybersecurity GRC team is reducing the cost of security compliance through automation and engineering. This is primarily an engineering role: you will design, build, and operate the automation that makes compliance measurable, repeatable, and efficient, applying software and infrastructure engineering practices to the governance, risk, and compliance domains. It is well suited to software, SRE, platform, or DevOps engineers seeking to apply their automation expertise to security operations. Passion for our mission and vision is required!

Responsibilities include but are not limited to:

  • Automating the collection of compliance artifacts and evidence across multiple cloud, SaaS, and internal platforms by integrating their APIs and normalizing the data.
  • Building and operating CI/CD pipelines and Compliance-as-Code so compliance content is version-controlled, tested, and validated automatically.
  • Automating configuration management and configuration monitoring - continuously validating system and platform configurations against approved baselines, detecting drift, and capturing results as evidence.
  • Supporting continuous monitoring by integrating and correlating security telemetry and findings from partner-team platforms (including vulnerability management and SIEM/observability) into control-status reporting.
  • Building GRC dashboards that integrate observability solutions to enable data-driven decisions.
  • Developing outcome-driven metrics and KPIs to measure control effectiveness.
  • Identifying manually intensive processes and engineering them away.
  • Supporting risk assessments and maintaining policies aligned with security frameworks.

Minimum Qualifications

  • 7+ years building and operating production software or infrastructure automation (software, SRE, DevOps, platform, or security engineering).
  • Proficiency in a general-purpose programming language (Python strongly preferred; Go, JavaScript/TypeScript, or similar welcome), with maintainable, tested, version-controlled code.
  • Experience integrating disparate systems via REST APIs and automating data/evidence collection across multiple cloud and SaaS platforms.
  • Hands-on experience with CI/CD pipelines (e.g., GitLab CI) and

... For full info follow application link.ITAR RequirementsTo conform to U.S. Government commercial space technology export regulations, including the International Traffic in Arms Regulations (ITAR), 8 U.S.C. § 1324b(a)(3), applicants for employment at Blue Origin must be a U.S. citizen or national, lawfully admitted for permanent residence into the U.S. (i.e. current green card holder), or lawfully admitted as a refugee or granted asylum under 8 U.S.C. § 1157-1158. Learn more about the ITAR here. Equal Employment OpportunityBlue Origin is proud to be an Equal Opportunity/Affirmative Action Employer and is committed to attracting, retaining, and developing a highly qualified, diverse, and dedicated work force. Blue Origin hires and promotes people on the basis of their qualifications, performance, and abilities. We support the establishment and maintenance of a workplace that fosters trust, equality, and teamwork, in which all employees recognize and appreciate the diversity of individual team members. We provide all qualified applicants for employment and employees with equal opportunities for hire, promotion, and other terms and conditions of employment, regardless of their race, color, religion, gender, sexual orientation, gender identity, national origin/ethnicity, age, physical or mental disability, genetic factors, military/veteran status, or any other status or characteristic protected by federal, state, and/or local law. Blue Origin will consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state, and local laws. For more information on “EEO Is the Law,” please see here and here.Affirmative Action and Disability AccommodationApplicants wishing to view a copy of Blue Origin’s Affirmative Action Plans, or applicants requiring a reasonable accommodation in order to participate in the application and/or interview process, please contact us at EEOCompliance@blueorigin.com.

More about this job

Skills

  • Regulatory compliance
  • CI/CD
  • Reporting
  • Industrial software
  • DevOps
  • Python
  • Go
  • JavaScript
  • TypeScript
  • API development
  • GitLab

Report this job