Posted 4 weeks ago

Staff DevOps Engineer

IonQ

Santa Clara, CA, United States 🇺🇸

Hybrid
Full Time
AWS

$152,000 - $228,000 year

Apply on source site

We are looking for a Staff DevOps Engineer to join our Quantum Platform Network Security Engineering Team
The Platform Engineering team builds, secures, and operates scalable infrastructure for cloud-managed SaaS products with on-premises components deployed at customer sites
The DevOps discipline owns the “software factory” — the end-to-end system that takes code from commit to production securely, reliably, and fast, with security embedded into every stage
As a Staff DevOps Engineer, you set the technical direction for the software factory. You own its roadmap, make the architecture and tooling decisions that shape how every product team ships, and raise the bar through standards, review, and mentorship
You remain deeply hands-on by writing pipeline code, building and testing infrastructure-as-code modules, configuring security scanning, managing dependencies, operating release infrastructure, and, where on-premises infrastructure is in scope, running physical and virtual systems. The work is automation-first with every repetitive task a candidate for a pipeline or an agentic workflow
CI/CD pipeline platform — the shared build, test, scan, sign, and deploy platform, with reusable templates and golden-path standards
Pipeline security and policy — scanning strategy, security gates, risk thresholds, and automated go/no-go decisioning
Release engineering and governance — the release train (versioning, environment promotion), the release gate with risk assessment, and an expedited, still-gated hotfix pipeline for emergency production changes
Dependency management and supply-chain security — dependency health, Software Bill of Materials (SBOM) generation, artifact signing, and provenance
Internal developer platform — self-service environment provisioning, onboarding, documentation, and the developer support model
Infrastructure as Code — reusable, tested modules, policy-as-code enforcement, and environment consistency across cloud and hybrid deployments
Security operations and compliance — vulnerability scanning, continuous compliance evidence, identity and access operations, and secrets lifecycle management
On-premises and hybrid operations — operational consistency between cloud and on-premises systems, where applicable
Agentic automation and AI security — agentic automation across the software factory, with guardrails and security controls for autonomous actions
Set the direction — own the software-factory roadmap and the architecture and tooling decisions behind it, and bring the organization along with you, so that every service builds, tests, scans, signs, and deploys through self-service, with no manual gates beyond code review and release approval
Make security the fast path — embed scanning and policy enforcement into every pipeline stage so secure delivery is the default, not a bottleneck
Run release management — operate the release train (versioning, environment promotion) and the release gate, and the expedited hotfix pipeline fast but fully gated
Keep dependencies and the supply chain healthy — automate dependency updates, track freshness, generate SBOMs, and verify artifact provenance
Build and improve the internal developer platform — deliver self-service capabilities that let product teams ship quickly and safely
Engineer infrastructure as code — write and test production modules with the same rigor product teams apply to application code
Operate security and compliance — run vulnerability scanning, drive findings to closure within security-based service-level targets and keep audit evidence continuously current
Automate with agents — build and operate agentic workflows for pipeline triage, dependency orchestration, and routine support, and enforce guardrails for autonomous actions
Scale the team and broaden impact — mentor engineers at different seniority levels, raise the bar through standards, review, and golden paths, and align Architecture, SRE, Cloud Operations, and Product Development behind the roadmap
Scripting and automation fluency, with a clear bias toward removing manual toil
Security embedded into pipelines as a practitioner — has personally configured scanning and driven a real vulnerability to closure within a deadline
8+ years of production engineering experience with recent hands-on work
Infrastructure-as-Code authored and tested, with production modules to show, not only consumed
Hands-on, recent experience building and operating CI/CD pipeline platforms at production scale
Demonstrated ownership of release, dependency, or vulnerability-management outcomes with measurable results
Release-gate or release-train ownership, including expedited or emergency-change delivery under pressure
Internal developer platform or self-service design, measured by adoption
Supply-chain security depth (signing, SBOMs, provenance, SLSA)
Agentic delivery automation (AWS Agent Core or equivalent) and AI or LLM security practice