Job description

Impinj delivers the Physical Intelligence that connects the physical world to the AI-powered digital world, fueling automated workflows and improving consumer experiences. From retail merchandise and groceries to packages and shipping pallets, Impinj products and solutions identify and track tens of billions of everyday items, providing real-time operational insights about every item enterprises make, move and sell. We are, quite literally, the eyes and ears of smart enterprise systems. Come help us build technology and solutions that enable businesses to visualize everything, waste nothing and act instantly. Team Overview: Our Information Security team is seeking a n experienced and results-driven Senior DevSecOps Engineer to drive secure-by-design practices throughout application development and operations. Th is role will report to the Director, Information Security , and act as a trusted security partner embedded with one of our engineering team s . You’ll shift security left by translat ing requirements into working controls, secure defaults, and pipeline guardrails. This role requires on-site presence at our Fairview office in Seattle on a hybrid basis. What You Will Do: Serve as a day-to-day security advisor for the team you support, advocating security requirements as an engineering team member during sprint planning, architecture reviews, process discussions, product direction, design decision s , and while work is in flight Build and maintain centralized automated security testing and enforcement in CI/CD, including static and dynamic application security testing (SAST/DAST), software composition analysis (SCA), secrets scanning, and infrastructure-as-code ( IaC ) scanning Manage centralized cloud monitoring tooling for vulnerability and configuration management, and integrate ongoing patching and hardening into engineering operations Continually audit application environments and development processes to ensure compliance with internal and external requirements , and alignment with security standard methodologies Manage the company’s software development life cycle policy alongside Information Security leadership Implement and maintain c loud detection and response monitoring, and act as an incident CIRT responder Document controls, configurations, and decisions to build durable institutional knowledge What You Will Bring: Bachelor's degree in Computer Science , Information Technology, Cybersecurity, or equivalent practical experience 8 + years of experience in DevOps, software engineering, or security engineering Proficiency with CI/CD platforms ( e.g., GitHub Actions, GitLab CI, Jenkins ) and infrastructure as code tools (e.g., Terraform, CloudFormation, Azure Bicep ) Hands-on cloud security experience in AWS and/or Azure, including identity and access management, containerization , network security controls, encryption, logging, and monitoring Demonstrated e xperience implementing automated application and infrastructure security testing, secrets management, and policy-as-code enforcement Familiarity with penetration testing applications or experience conducting penetration testing engagements Strong scripting skills in Python, Bash, or PowerShell for automation and integration Experience supporting third-party attestations and audits (e.g., SOC 2 Type 2 , ISO 27001 ) , including preparation, implementation , and ongoing evidence collection Strong communication and governance skills, with the ability to translate technical risk into business terms for technical and non-technical audiences, and to advocate for security without slowing down delivery Compensation & Benefits: The benefits listed below may vary depending on the nature of your employment with Impinj and the country where you work. The typical base pay range for this role across the US is $131,200 - $196,800 . Individual base pay depends on various factors such as complexity and responsibility of role, job duties, requirements, and relevant experience and skills. Both market wage data and the mid-point of the pay range is reviewed and used as the starting point for all new hire offers. Offers are made within the base pay range applicable at the time. At Impinj certain roles are eligible for additional rewards, including merit increases, annual bonus and stock. These awards are allocated based on individual performance. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee’s role. US based employees have access to healthcare benefits; a 401(k) plan and company match among others. For a more comprehensive list of US employment benefits, click here . US Export Controls: This position has access to technologies or data subject to U.S. export control regulations. Under these laws, the release or transfer of export-controlled items or information to individuals who are not classified as "U.S. persons" (as defined by Immigration & Nationality Act) may require prior authorization from the U.S. government. We may require additional documentation related to national identity to determine whether an export compliance license is required for any export-controlled items. This information is requested solely for the purpose of complying with U.S. export control laws and will not be used for other purposes. Learn more about export compliance here . Why work at Impinj: Know you’re making a difference. Competitive benefits. Support for remote work or a desk with a view. Weekly Q&A sessions with our executive team. Impinj provides an environment that fosters openness and innovation and is developing technology that delivers a positive impact on the world. Collaboration and teamwork are highly valued, and accomplishments are duly celebrated. We have an open paid time-off policy paired with a respect for work/life balance. Our headquarters is located in Seattle with spectacular views of the Olympics, Lake Union, and Mt Baker, which can be enjoyed from our rooftop deck. Our Brazilian site is in Porto Alegre, Rio Grande do Sul state, at “Tecnopuc,” a technology park that offers a very nice workplace for the development of groundbreaking technologies. Impinj is committed to creating a diverse and inclusive work environment and welcomes applicants from all backgrounds. We are an equal opportunity employer and do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Requirements

Must-haves

Manage centralized cloud monitoring tooling for vulnerability and configuration management, and integrate ongoing patching and hardening into engineering operations
Continually audit application environments and development processes to ensure compliance with internal and external requirements , and alignment with security standard methodologies
Manage the company’s software development life cycle policy alongside Information Security leadership
Implement and maintain c loud detection and response monitoring, and act as an incident CIRT responder
Document controls, configurations, and decisions to build durable institutional knowledge
Bachelor's degree in Computer Science , Information Technology, Cybersecurity, or equivalent practical experience
8 + years of experience in DevOps, software engineering, or security engineering
Proficiency with CI/CD platforms ( e.g., GitHub Actions, GitLab CI, Jenkins ) and infrastructure as code tools (e.g., Terraform, CloudFormation, Azure Bicep )
Hands-on cloud security experience in AWS and/or Azure, including identity and access management, containerization , network security controls, encryption, logging, and monitoring
Demonstrated e xperience implementing automated application and infrastructure security testing, secrets management, and policy-as-code enforcement
Familiarity with penetration testing applications or experience conducting penetration testing engagements
Strong scripting skills in Python, Bash, or PowerShell for automation and integration
Experience supporting third-party attestations and audits (e.g., SOC 2 Type 2 , ISO 27001 ) , including preparation, implementation , and ongoing evidence collection
Strong communication and governance skills, with the ability to translate technical risk into business terms for technical and non-technical audiences, and to advocate for security without slowing down delivery
The benefits listed below may vary depending on the nature of your employment with Impinj and the country where you work.
For a more comprehensive list of US employment benefits, click here .

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aici/cdazureawspython

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

401(K)