Generate and maintain software bills of materials (SBOMs) for in-scope applications.
CI/CD pipelines
Build and maintain CI/CD pipelines (for example GitHub Actions, Azure DevOps, GitLab CI, or Cloud Build) for application and infrastructure code.
Implement pipeline security controls: secrets management, signed artifacts, least-privilege service identities, and protected branches.
Improve build reliability and speed, and troubleshoot pipeline failures across teams.
Infrastructure as code and cloud CLI
Write and maintain Terraform to provision cloud resources consistently.
Use cloud CLIs and SDKs plus scripting to automate operational tasks.
Manage Terraform state, module versioning, and drift detection, and follow code review and change management practices.
Platform architecture
Implement cloud landing zone components to approved designs: networking, identity and access, logging, and policy guardrails.
Contribute to architecture discussions and document the components the engineer builds and supports.
Apply security baselines (CIS benchmarks, organization policies, Azure Policy) to cloud resources and workloads.
Secure SDLC
Integrate security testing into the development lifecycle: SCA, static analysis (SAST), secrets scanning, container and IaC scanning.
Support developers in fixing findings and following secure coding and dependency management practices.
Help produce evidence of SDLC controls for internal audit, SOX, ITGC, and CMMC requirements.
Operations and collaboration
Monitor cloud environments for availability, cost, and security posture, and respond to incidents as part of an on-call rotation.
Partner with Cybersecurity, Global Infrastructure, Enterprise Architecture, and application teams.
Keep runbooks, diagrams, and standards documentation current.
What You Will Need
3+ years in DevOps, cloud engineering, or systems engineering, with at least 2 years hands-on in a major cloud platform (GCP, Azure, or AWS).
Bachelor's degree in computer science, information systems, or equivalent experience.
Working proficiency with Terraform and at least one cloud CLI.
Experience building and maintaining CI/CD pipelines.
Scripting ability in PowerShell, Bash, or Python.
Understanding of cloud networking, IAM, and core security concepts.
Familiarity with Git workflows and code review.
Preferred Qualifications
Experience deploying or operating SCA or other application security tooling.
Exposure to containers and Kubernetes (GKE, AKS, or EKS).
Cloud certification such as Google Professional Cloud Engineer, Azure Administrator (AZ-104), or AWS Solutions Architect Associate.
Experience in a regulated environment (SOX, CMMC, NIST 800-171).
Why Allegro?
Join Allegro and become part of a team where your contributions truly matter.
We foster a culture of Real Innovation, empowering you to push boundaries, develop cutting-edge solutions, and drive continuous improvement.
Your work will create a Real Impact by solving complex real-world challenges that fuel our success and shape the future of technology.
You’ll experience Real Connection, collaborating with talented colleagues around the globe in an environment built on trust, respect, and a shared purpose.
Join us—and help build what’s next.
At Allegro, we are committed to providing a harassment-free environment of mutual respect to fuel innovation through inclusive thought collaboration. Allegro is an Equal Opportunity Employer and does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, physical or mental disability, national origin, veteran status, parental status, or any other basis covered by appropriate law. Allegro makes hiring decisions based solely on qualifications, merit, and business needs at the time.
Eligible applicants must reside in a state where Allegro currently has an office location: This includes New Hampshire, Massachusetts, Texas, and Michigan. Certain positions (such as field sales roles) may be exempt from this requirement.
